Loading threat actor…
Prince Group, also designated as the Prince Group Transnational Criminal Organization (Prince Group TCO), is a Cambodia-based transnational criminal network led by chairman Chen Zhi, also known as Vincent. U.S. and U.K. authorities sanctioned the network and numerous associated individuals and entities in October 2025. U.S. authorities have charged Chen Zhi with wire-fraud and money-laundering conspiracies and allege that the organization operated large-scale cryptocurrency investment fraud, romance-baiting, and pig-butchering schemes from forced-labor scam compounds in Cambodia. The network allegedly trafficked and coerced workers to conduct online fraud against victims globally, including U.S. victims, and laundered the resulting proceeds through cryptocurrency and a network of corporate entities. Authorities have linked Prince Group-associated entities to scam-compound operations, online gambling, financial services, and crypto-enabled laundering. U.S. forfeiture action targeted cryptocurrency alleged to be controlled by Chen Zhi, and the group has been associated with a major cross-border asset-seizure and sanctions campaign. Prince Group is also referred to as prince_group, prince_group_(alleged), and the_prince_group.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
5 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
17 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Allegedly operated Cambodia-based cyber-fraud compounds that used trafficked or otherwise forcibly held workers to conduct industrial-scale cyber-scamming. The group and its chairman, Chen Zhi, deny the allegations.
A transnational criminal organization whose entities reportedly used Xinbi Guarantee's marketplace services.
A transnational criminal organization whose constituent entities reportedly used the Xinbi marketplace. OFAC actions against the group preceded and informed the Xinbi designation.
Alleged criminal enterprise tied to large-scale scam-center activity, money laundering, and 'pig butchering' fraud proceeds.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.