Menu
Browse

Cyber Threat Actor: siph0n

Aliases 2 aliases
Actor Type Location Known Incidents
 Icon
Criminal
Russia
2 incidents
Profile

The threat actor is known by the aliases sn0n and siph0n.
The actor's location is indicated as Russia in the threat actor context.
Both aliases appear in the identifiers of leaks hosted on hacked-emails.com, specifically siph0n-4659 and siph0n-4658.
These leak identifiers are associated with the dates 2016-04-18 and 2016-04-15 respectively.

The summaries of those leaks state that the provided articles do not contain any information about specific incidents involving the actor.
Instead, the articles focus on Constella Intelligence's digital risk protection services.
Consequently, no details about the actor's targeting, tactics, or impact are present in the source material.
The lack of incident specifics means that any description of the actor's activities would be speculative.

The referenced articles describe Constella Intelligence's combination of 4iQ's investigation platform and Alto Analytic's data analytics.
They note that the company archives more than 25 billion breach identity records.
The articles state that Constella Intelligence analyzes over 29 billion social and news media posts.
They also mention that the company monitors 66 billion breached identity records.
Additionally, the articles report that 195 million partner assets are monitored.
The services include dark web monitoring that indexes millions of dark web pages, pastes, criminal forums, Telegram, IRC, and I2P pages.
Real-time alerting is provided by an experienced team of analysts and security intelligence professionals.
An intelligence API is offered for integrating surface-to-dark web monitoring to combat fraud and account takeover.

Because the source material does not link the actor to any of the described capabilities or incidents, only the aliases and location can be affirmed.
Any further characterization of the actor's motives, methods, or affiliations would require additional evidence.
Therefore, the profile is limited to the confirmed facts of the aliases sn0n and siph0n and the indicated Russian location.
This concludes the factual overview based solely on the provided information.

Incidents
Attributed incidents available to members
2 incidents
Sources
Sources available to members
2 sources