Gorgon Group
Gorgon Group is a Pakistan-attributed cybercrime syndicate with an espionage motive, tracked by Brandefense. It targets 5 sectors, including Government and Manufacturing, in 8 countries, including the United States and the United Kingdom. It uses 17 MITRE ATT&CK techniques and exploits 2 known CVEs.
- Subaat
- ATK 92
- TAG-CR5
- Pasty Draco
- G0078
- Origin
- Pakistan
- Techniques
- 17
- Exploited CVEs
- 2
- First seen
- Jan 1, 2017
- Last seen
- Aug 2, 2018
- Record updated
Who They Target.
About Gorgon Group.
Gorgon Group is a threat group consisting of members who are suspected to be Pakistan-based or have other connections to Pakistan. The group has performed a mix of criminal and targeted attacks, including campaigns against government organizations in the United Kingdom, Spain, Russia, and the United States.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.