Loading threat actor…
anisanas2 is a threat actor handle associated with a claimed data breach targeting Distamed Morocco, a Moroccan supplier of medical devices and healthcare solutions. The actor publicly alleged theft of the victim’s full database and historical company archives, including sensitive health-related and business records. Claimed exposed material included patient information, client data, internal corporate files, billing records, invoices, document scans, and records allegedly connected to Moroccan public-sector and military hospital dealings. The available reporting does not provide independent corroboration of the intrusion, sample data, file listings, or other evidence sufficient to verify the claim. Based on the available facts, anisanas2 is best characterized as a purported data-breach actor involved in alleged exfiltration and post-compromise disclosure claims against a healthcare-sector organization in Morocco. Attribution to a nation state, broader campaign links, tooling, sub-groups, or additional aliases is not currently supported by high-confidence evidence.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
1 distinct technique observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.