CyberN******

CyberN****** is a cybercriminal group that emerged from a March 2023 rebrand of an earlier collective known as The Boys, which had roughly 32 members in January 2023. The group has been linked to the broader stolen-data economy and to BreachForums activity, with IntelBroker identified as affiliated with CyberN******. By August 2024, reporting identified four core members, including a collaborator referred to as CC-1. The group is associated with financially motivated intrusion and data brokerage activity centered on stealing, brokering, and distributing victim data. Operations attributed to affiliated actors relied primarily on exploiting basic security misconfigurations, insecure APIs, and compromises of third parties rather than zero-day vulnerabilities. Observed behavior includes unauthorized access to victim environments, exfiltration of data, and in at least one case deletion of victim data. The group’s ecosystem overlaps with criminal marketplace operations in which stolen datasets were advertised for sale or released publicly through forum posts. CyberN****** is best understood as part of an organized cybercriminal milieu focused on monetizing intrusions through data theft and resale rather than destructive or ideological objectives. Its known associations indicate post-compromise exploitation and exfiltration capabilities, with activity affecting dozens of victims globally through affiliated operations.