The hacktivist group Twelve has been active since at least April 2023, it was formed in the wake of the conflict between Russia and Ukraine.

The threat actor focuses on destroying critical assets, disrupting target business, and stealing sensitive data.