Loading threat actor…
Vigorish Viper is a Chinese organized-crime syndicate operating within Southeast Asia’s illegal online gambling and illicit-finance ecosystem. Publicly identified in 2024, it operates an integrated cybercrime supply chain encompassing custom software, DNS infrastructure, website hosting, mobile applications, encrypted communications, and payment systems. Its services primarily support Chinese-facing illegal gambling operations and associated financial flows. The syndicate maintains a large infrastructure footprint, with approximately 666,000 active Chinese-language casino domains identified in one tracked dataset. Its network is associated with bulletproof content-delivery and hosting infrastructure used to obscure casino hosting and sustain illicit operations. Vigorish Viper and the separate Vault Viper syndicate are linked through the Suncity criminal organization, which controls both groups. Vigorish Viper’s principal motivation is financial gain through its gambling infrastructure and associated criminal services.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
2 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt.
4 indicators attributed to this actor. Values are masked here and available in full in Mallory.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.