Skip to content
brandefense.io
Request A Demo
UnclassifiedIdeologyAdvanced sophistication

GTG-20006

GTG-20006 is a Russia-attributed threat actor group with an ideological motive, tracked by Brandefense. It targets the Hospitality and Tourism sector. It uses 4 MITRE ATT&CK techniques.

Also known as
  • Russia-linked espionage
Request IOC feedRequest ATT&CK export
Origin
Russia
Techniques
4
Exploited CVEs
No CVE data
Record updated

Who They Target.

Sectors · 1

About GTG-20006.

An espionage actor employing automated workflows for reconnaissance and exfiltration, capable of automatically rebuilding malware upon detection and freezing security updates on victim machines. They targeted hospitality suppliers and cloud mail users through DNS hijacking and device code phishing.

Last updated Sep 15, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.