APT-C-27
APT-C-27 is a Syria-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets organisations in Syria. It exploits 1 known CVE.
Also known as
- GoldMouse
- Golden RAT
- ATK80
- Golden Rat Organization
- Origin
- Syria
- Techniques
- 0
- Exploited CVEs
- 1
- First seen
- Jan 1, 2014
- Last seen
- Mar 19, 2019
- Record updated
Who They Target.
Countries · 1
About APT-C-27.
A threat actor which is ac tive since at least November 2014. This group launched long-term at tacks against organizations in the Syrian region using Android and Windows malwares. Its objective is the theft of sensitive information.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.