Fxmsp: “The Invisible God of Networks”
← Research Hub

Fxmsp: “The Invisible God of Networks”

The report shows how Fxmsp’s cybercriminal career evolved from a newbie hacker to one of the major players of the Russian-speaking underground. Group-IB’s team uncovered Fxmsp’s TTPs and established his presumed identity.

Take a deep dive into the history of Fxmsp — one of the most notorious and prolific sellers of access to corporate networks on underground forums. In 2018, a user of one of the underground forums shared a post which promoted the services of breaking into corporate networks and selling access to them and read «You will become the invisible god of networks…» This user was Lampeduza, who turned out to be Fxmsp’s sales manager.

Key Facts

44 Countries

where Fxmsp struck

135 Companies

were hit, 8.9% of which were state-owned. Light industry, IT, and Retail were the most common targets

$1,500,000+

Estimated earnings of the threat actor based on his public lots

3+ years

Active on underground forums

Download the report to learn

The evolution of FxmspThe evolution of Fxmsp

Follow the hacker from his first posts requesting for technical help and first victims to him earning the nickname «invisible god» in compromised networks.

Fxmsp’s tactics, technics, and procedures (TTPs)Fxmsp’s tactics, technics, and procedures (TTPs)

Learn how he gained access to networks and what was unique about his attacks; how he prepared for and accomplished network persistence, and compromised back up servers; and how to protect your business from similar attacks.

Fxmsp’s presumed identityFxmsp’s presumed identity

Follow the steps Group-IB Threat Intelligence & Attribution experts took to unmask the hacker. See how top-tier technology and analytical tools helped find out who was hiding behind the famous nickname.
At the time of writing, Fxmsp is no longer publicly active. It remains uncertain, however, whether he is still breaking into company networks and selling access to them. Given the risk, Group-IB Threat Intelligence & Attribution experts decided to release this report, share its expanded version with international law enforcement agencies, and make our materials on Fxmsp’s TTPs accessible to the general public.

Advanced protection against cyber threats

Group-IB’s security ecosystem provides comprehensive protection for your IT infrastructure based on our unique cyber intelligence and deep analysis of attacks and incident response.