Poseidon Group

Poseidon Group is a Portuguese-speaking threat group that has been active since at least 2005. This group has used information exfiltrated from victims to blackmail companies into contracting Poseidon Group as a security firm.

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.