Skip to content
Install MCP

Threat actor

Crimson Hexagon

Last fetched

Crimson Hexagon is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Crimson Hexagon, a Boston-based social media analytics firm, specializes in using artificial intelligence to analyze vast amounts of public social media data, providing insights for clients ranging from corporations like Adidas to government agencies such as the U.S. State Department. Founded in 2007 by Harvard professor Gary King and Candace Fleming, the company has built a repository of over a trillion public social media posts from platforms like Facebook, Instagram, and Twitter (now X). However, it has faced scrutiny over potential misuse of data for surveillance purposes, particularly in contracts with entities like the U.S. government, the Turkish government, and a Russian nonprofit linked to the Kremlin. Crimson Hexagon became known as Brandwatch after a merger in 2018, and was later acquired by Cision for $450 million.

Techniques by tactic

No ATT&CK techniques are recorded for Crimson Hexagon in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Crimson Hexagon today — this states the absence of a published link, not that Crimson Hexagon has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Crimson Hexagon into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.