NTC Vulkan
| Actor Type | Commercial Provider |
|---|---|
| Attributed to Nation | Russia |
NTC Vulkan is a Russian cybersecurity consultancy, identified as a key player in enhancing Russia's cyberwarfare capabilities. It develops advanced hacking and disinformation tools for Russian military and intelligence agencies. In March 2023 documents were leaked by a whistleblower which outlined capabilities developed by the company and information of who their customers are.
The leaked documents reveal Vulkan's involvement in supporting hacking operations, training operatives, spreading disinformation, and controlling parts of the internet. Its clients include the FSB, GOU, GRU, and SVR.
Notable systems developed by Vulkan include Scan-V, a reconnaissance tool linked to the Sandworm hacking group; Amezit, for internet surveillance and control; and Crystal-2V, a training program for cyber-operatives targeting critical infrastructure.
Reporting suggests that the tools built by Vulkan may have been used in real-world attacks.
Cyber Threat Graph Context
Explore how this cyber threat actor relates to the wider threat graph