GOLD SALEM
GOLD SALEM is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 6 MITRE ATT&CK techniques.
- Techniques
- 6
- Exploited CVEs
- No CVE data
- Record updated
How They Operate · MITRE ATT&CK.
6 techniques across 4 of 14 tacticsVulnerabilities Linked To Their Tools.
Browse Vulnerability Intelligence →Arsenal · Malware And Tools.
- Babukmalware
- LockBit 2.0malware
- Warlockmalware
- Microsoft SharePointtool
- Microsoft Visual Studio Codetool
- Velociraptortool
About GOLD SALEM.
A sophisticated cybercriminal syndicate primarily motivated by financial extortion, but exhibiting operational tradecraft and targeting patterns consistent with state-sponsored groups involved in intelligence gathering and cyberespionage. They are known for weaponizing legitimate DFIR tools like Velociraptor.
Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.