ChimeraZ
ChimeraZ is a threat actor alias associated in the provided content with claimed leaks targeting the French real-estate sector. The actor is described as being behind recent alleged breaches involving Capifrance, Leboncoin Immobilier, Proprietes-Privees, and Amepi (Amanda), characterized as part of an announced run of French real-estate breaches. The activity described consists of posting alleged stolen databases on underground forums, including both paywalled and free-download offerings, sometimes with per-file samples, record counts, and multiple download links. Reported exposed data across these claims includes personal information, property deal and transaction records, mandate signatures, agent-related data, agency and agent names, visitor identities, property addresses, listing prices, mandate and visit identifiers, transaction locations, and cooperative listing metadata. The content states these leaks could support phishing, impersonation, property-related scams, and social engineering. All specific breach claims in the provided content are explicitly described as unverified and not independently confirmed. No nation-state attribution is provided in the content, and no sub-groups or additional aliases beyond ChimeraZ are mentioned.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Who they target
Sectors the actor has been observed targeting.
- Real Estate Management & Development
Where they target
Geographies tied to known operations.
- 🇫🇷 France
Recent activity
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Claims responsibility for a series of alleged French real-estate data breaches and leaks, including Capifrance, Leboncoin Immobilier, and Proprietes-Privees, with stolen databases advertised on an underground forum.
Claimed leak actor allegedly releasing a database tied to Amepi, with the post stating this follows a pattern of recent French sector leaks attributed to the same actor.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.