Loading threat actor…
Sumiyoshi-kai is a major Japanese organized crime syndicate associated with fraud, financial crime, and the use of affiliated groups in broader criminal operations. Reporting links the organization and its affiliates to schemes involving fraudulently obtained assets and to anonymous criminal networks engaged in special fraud as well as social-media-enabled investment and romance scams. A named affiliate, the Kohei Family, has been identified by Japanese authorities as a priority target in investigations into Tokuryu-linked scam activity. The group’s observed tradecraft centers on financially motivated criminal operations rather than state-directed espionage. Documented behaviors include the use of straw buyers and front companies to obtain financed or leased goods, exploitation of weak identity verification and beneficial-ownership checks, and participation in fraud ecosystems that rely on recruiters, call-center operations, and money-mule networks to move proceeds. Authorities have also associated these networks with cash-out and logistics channels designed to obscure the movement of stolen funds. Sumiyoshi-kai’s activity, as reflected in current reporting, is concentrated in Japan and intersects with sectors exposed to fraud risk, including automotive finance and leasing, banking, payments, telecommunications, and online platforms used to advertise or facilitate scams. The actor is best characterized as an organized criminal enterprise pursuing financial gain through fraud, deception, and supporting criminal infrastructure.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 distinct technique observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Organized crime activity involving fraudulent acquisition of a high-end vehicle through straw buyers, weak identity verification, and front-company style abuse of dealer, lender, and leasing processes in Japan.
Organized crime group referenced through its affiliate Kohei Family in connection with Tokuryu-linked fraud and scam infrastructure.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.