Threat IntelligenceApr 29, 2026
‼️ Threat Actor 0056113 Selling Compromised Law-Enforcement Emails and EDR-as-a-Service for Fraud...
Threat actor 0056113 selling compromised law enforcement emails and EDR access for fraudulent data requests.
Summary
Threat actor 0056113 is actively marketing stolen law enforcement credentials and endpoint detection and response (EDR) system access on dark web forums. The actor is leveraging these compromised assets to facilitate fraudulent emergency data requests, likely targeting financial institutions and other entities to exfiltrate sensitive information. This represents a significant threat to both law enforcement operations and private sector security infrastructure.
Entities
0056113 (threat_actor)Endpoint Detection and Response (EDR) (technology)