Skip to content
CybercrimeFinancialExpert sophistication

Candiru

Candiru is an Israel-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 5 sectors, including Government and Finance, in 4 countries, including the United States and Israel. It uses 11 MITRE ATT&CK techniques and exploits 2 known CVEs.

Also known as
  • Saito Tech Ltd.
Origin
Israel
Techniques
11
Exploited CVEs
2
Record updated

Who They Target.

About Candiru.

Israeli spyware company known for its malware, DevilsTongue, which provides cyber weapons to governments. Added to the U.S. Department of Commerce Entity List in 2021 for malicious cyber activities. Founded by Eran Shorer and Yaakov Weizmann.

Last updated Oct 16, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.