Threat Investigation
Request a demo
Cybercrime

Infrastructure Destruction Squad

Infrastructure Destruction Squad is classified as cybercrime.

Origin
Russia
Also known as
1

Dark Engine has emerged as a significant threat actor targeting industrial control systems and SCADA systems in sectors such as metallurgy and food processing. The group has conducted multiple ICS-targeted incidents, with a pronounced operational surge in June 2025. Additionally, Dark Engine is involved in a campaign that embeds fraudulent CAPTCHA prompts into legitimate WordPress sites, utilizing SEO poisoning to harvest login credentials. Reports also indicate a data leak from Dark Engine that exposed sensitive phone data in the U.S.

The group's reported origin is Russia.

Also known as: Dark Engine

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Infrastructure Destruction Squad · Threat actors · Dark Radar