Loading threat actor…
The Camorra is an Italian organized crime syndicate originating in the Naples area and Campania region. It is composed of multiple clans rather than a single centralized hierarchy. One prominent coalition within the Camorra is the Secondigliano Alliance, which includes the Licciardi, Contini, and Mallardo clans. The group is associated with mafia-style criminal activity, including aggravated extortion. In the referenced law-enforcement action, a senior Camorra member identified as a leading figure in the Licciardi clan was arrested in Spain after having fled Italy, illustrating the organization’s ability to operate across borders and rely on family and clan networks while evading arrest. The available facts support characterization of the Camorra here as a transnational organized crime actor engaged in extortion rather than a state-sponsored cyber threat actor.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.