Cyber Threat Actor: Morpheus

Morpheus is an alias used by a ransomware group that has been referenced in open‑source reporting. The group became known after a ransomware.live post on 2026‑06‑10 identified HDFC Asset Management Company Limited as a victim. HDFC Asset Management operates the hdfcfund.com domain and is described as operating within the financial services sector. The victim’s reported revenue at the time of the incident was $427.8 million. The ransomware.live entry placed the company in the recent victims section, indicating a successful encryption and extortion attempt. No technical details about the specific malware variant or infection chain were included in that posting.

Because the public record contains only this single incident, no additional targeting patterns, tooling preferences, or affiliation information can be derived for Morpheus. The absence of disclosed initial access vectors, command‑and‑control infrastructure, or associated malware families means that any description of the group's tactics remains limited to what has been seen. No public attribution to a state sponsor or criminal consortium has been made available. Consequently, the profile is confined to the confirmed facts of the alias, the observed incident, and the identified victim in the financial services sector.