Threat Group Profile
D1R
Dormant / historical
Victim claims
3
First seen
Jul 2026
Last activity
13 Jul 2026
Tracked since
Jul 2026
Group overview
D1R Claims Synopsys and Bosch Breaches, but Synopsys Disputes Intrusion
Preferred targets
Technology · 2
Manufacturing · 1
Most targeted countries
US · 1
DE · 1
GB · 1
Tactics & techniques (MITRE ATT&CK)
Initial Access
Valid Accounts
Exploit Public-Facing Application
Persistence
Valid Accounts
Privilege Escalation
Valid Accounts
Stealth
Valid Accounts
Credential Access
Multi-Factor Authentication Interception
Steal or Forge Authentication Certificates
Collection
Data from Information Repositories
Data from Cloud Storage
Exfiltration
Automated Exfiltration
Exfiltration Over C2 Channel
Exfiltration Over Alternative Protocol
Exfiltration Over Web Service
Impact
Data Encrypted for Impact
Financial Theft