Mastermind

Profile narrative

Mastermind is a cyber threat actor known by the alias Mastermind and has been publicly associated with operations originating from China. The actor came to attention in January 2015 when a Russian‑based online dating service, Topface, suffered a breach that exposed the usernames and e‑mail addresses of roughly twenty million users. According to fraud‑detection firm Easy Solutions, the stolen dataset was subsequently advertised for sale on cybercrime forums by an individual using the Mastermind alias. The breach was disclosed after the attacker marketed the data within underground online communities, highlighting the actor’s role in the initial compromise and the subsequent distribution of the stolen information. No additional details about the tools, malware, or specific intrusion techniques employed in this incident are provided in the available sources. The actor’s known location in China is the only geographic attribute that has been explicitly stated in the threat intelligence.

The Topface incident indicates that Mastermind’s activity targeted the online dating sector, specifically a service with a large user base located in Russia. By offering the harvested credentials for sale, the actor demonstrated a clear financial motive, as the primary objective appeared to be monetizing the stolen data rather than pursuing espionage or disruption. No public reporting links Mastermind to any state‑sponsored program, criminal consortium, or broader campaign beyond this single disclosed operation. Consequently, while the actor’s alias and location are confirmed, further specifics regarding typical targeting patterns, strategic objectives beyond financial gain, or characteristic tactics, techniques, and procedures remain undocumented in the referenced material. This profile therefore reflects only the verifiable facts presented in the source documentation.

Incidents

Attributed incidents are available to members.