Skip to content
RansomwareFinancialIntermediate sophistication · Informal collective

APT73

APT73 is a ransomware group with a financial motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 53 countries, including the United States and the United Kingdom. It uses 31 MITRE ATT&CK techniques.

Also known as
  • Eraleign (apt73)
  • Bashe
  • Eraleig Ransomware
Techniques
31
Exploited CVEs
No CVE data
First seen
Apr 22, 2024
Last seen
Jul 24, 2026
Record updated

Who They Target.

Labelsapt73ransomware

About APT73.

A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field. According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit. Source:.

Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.