UnclassifiedUnknown
Nobita14
Nobita14 is a threat actor group, tracked by Brandefense. It targets 7 sectors, including Manufacturing and Technology, in 5 countries, including the United States and Canada. It uses 3 MITRE ATT&CK techniques.
- Techniques
- 3
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
How They Operate · MITRE ATT&CK.
3 techniques across 2 of 14 tacticsReconnaissance·
Resource Development·
Initial Access·
Execution·
Persistence·
Privilege Escalation·
Defense Evasion·
Credential Access·
Discovery1
T1491
Defacement
Defacement
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Indicators Of Compromise.
TLP:AMBER1 indicator on the Brandefense platform
IP, domain and hash indicators · YARA rules · ATT&CK Navigator export
Request A DemoAbout Nobita14.
Threat actor who defaced a Turkish intercity transportation company's website; the incident was a targeted single-site defacement with a mirror archived on zone-xsec.com.
Last updated Oct 27, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.