Mr. Raccoon
Mr. Raccoon is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 4 sectors, including Healthcare, and Defense and Aerospace, in Russia. It uses 13 MITRE ATT&CK techniques.
Also known as
- Raccoon
- UNC6783
- Techniques
- 13
- Exploited CVEs
- No CVE data
- First seen
- Apr 8, 2026
- Last seen
- Nov 1, 2026
- Record updated
Who They Target.
Countries · 1
How They Operate · MITRE ATT&CK.
13 techniques across 5 of 14 tacticsReconnaissance·
Resource Development3
T1195.002
Supply Chain Compromise: Compromise Software Supply Chain
Supply Chain Compromise: Compromise Software Supply Chain
T1199
Trusted Relationship
Trusted Relationship
T1650
Acquire Access
Acquire Access
Initial Access6
T1078
Valid Accounts
Valid Accounts
T1204.001
User Execution: Malicious Link
User Execution: Malicious Link
T1437
Application Layer Protocol
Application Layer Protocol
T1566
Phishing
Phishing
T1566.002
Phishing: Spearphishing Link
Phishing: Spearphishing Link
T1566.003
Phishing: Spearphishing via Service
Phishing: Spearphishing via Service
Execution1
T1219
Remote Access Tools
Remote Access Tools
Persistence2
T1098.005
Account Manipulation: Device Registration
Account Manipulation: Device Registration
T1556.006
Modify Authentication Process: Multi-Factor Authentication
Modify Authentication Process: Multi-Factor Authentication
Privilege Escalation·
Defense Evasion1
T1552.001
Unsecured Credentials: Credentials In Files
Unsecured Credentials: Credentials In Files
Credential Access·
Discovery·
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Impact·
Arsenal · Malware And Tools.
- side-channel-weakmapmalware
About Mr. Raccoon.
Claims a breach of Neighbourly totalling 213,391,325 lines and 150 GB and offers the full samples via Telegram contact.
Last updated Nov 5, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.