Actor de amenaza individual
PHOENIX
Estado: Activo
Confianza: Confirmado
PHOENIX is assessed as a group rather than an individual persona, based on independent reporting that lists it among pro-Russian groups participating in a NoName057(16)-aligned coalition. Reporting supports shared coalition activity with Horus Team and SoubearArmy; the supplied SKILLNET relationship remains unconfirmed. The generic name creates a material collision risk with unrelated entities.
INFERENCE (confidence: medium): The current profile should be updated through event-level validation rather than by inheriting capabilities from associated personas, channels or adjacent ecosystems.
ATT&CK
MITRE ATT&CK
T1498Network Denial of Service