Threat actor

BellTroX

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 9, 2026 · last 6d ago

Timeline2 articles

Lawmakers call on Treasury to sanction hackers-for-hire

Bipartisan US lawmakers asked Treasury to sanction three India-based hack-for-hire firms accused of long-running espionage against Americans.

Sens. Ron Wyden and Sheldon Whitehouse and Rep. Pat Harrigan urged Treasury to add Sunkissed Organic Farms (formerly Appin), BellTroX, and CyberRoot to the Entity List. The letter says the mercenary groups conducted targeted espionage against US citizens, businesses, and lawyers for over fifteen years, allegedly including work for Qatar's government such as targeting opponents of Qatar's World Cup bid and Kristi Rogers, wife of Senate candidate Mike Rogers. Adding the firms to the Entity List would restrict their access to American software, cybersecurity tools, and cloud infrastructure. The lawmakers also accuse the groups of lawfare campaigns to censor investigative reporting on their hacking activities.

CyberScoopupdated Sep 10, 17:19 UTC · 5d agofirst Sep 9, 18:43 UTC · 6d agoThreat actor in the wild 3 sources

Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms

Bipartisan US lawmakers urged the Commerce Department to add hack-for-hire firms BellTroX, CyberRoot, and Appin/Sunkissed Organic Farms to the entity list.

Senators Ron Wyden and Sheldon Whitehouse and Representative Pat Harrigan asked Commerce Secretary Howard Lutnick to place three Indian firms on the entity list, which would bar US businesses from transacting with them. The letter says BellTroX, CyberRoot, and Sunkissed Organic Farms (formerly Appin) have conducted cyberattacks and targeted espionage against Americans for over a decade, allegedly at the behest of the Qatari government, and used foreign courts to censor reporting on their activities. Appin previously secured a global takedown order against Reuters that was later lifted, and has been linked to hacks of FIFA officials tied to Qatar's 2022 World Cup plans.

TechCrunch · Securityupdated Sep 10, 17:19 UTC · 5d agofirst Sep 9, 13:01 UTC · 6d agoPolicy & legal 3 sources1

Appears with

organization Reuters 2 threat actor CyberRoot 2 organization Citizen Lab 2 threat actor Appin 2 organization Sunkissed Organic Farms 1 organization TechCrunch 1 organization University of Toronto 1 organization US Congress 1 organization U.S. Department of Commerce 1 organization US Department of Justice 1 organization US Department of the Treasury 1 vendor Citizen Lab 1 vendor Microsoft 1 victim Kristi Rogers 1 victim Mike Rogers 1 victim Qatar 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.