Skip to content
Threat actors by attributed origin

Pakistan-Attributed Threat Actors.

Brandefense tracks 10 threat actors attributed to Pakistan. The most documented are Transparent Tribe, SideWinder and SideCopy. The sectors they target most are Government, Civil Society and NGOs, and Defense and Aerospace.

10 of 10 published profiles shown

Transparent TribePakistan
aka Copper Fieldstone · C-Major · APT36 +13
Nation-state APTEspionage

Transparent Tribe is a Pakistan-attributed nation-state APT group with an espionage motive.

165TTPs
5exploited
106malware
AdvancedProfile →
SideWinderPakistan
aka Rattlesnake · T-APT-04 · APT-C-17 +8
Nation-state APTIdeology

SideWinder is a Pakistan-attributed nation-state APT group with an ideological motive.

99TTPs
6exploited
54malware
AdvancedProfile →
SideCopyPakistan
Nation-state APTEspionage

SideCopy is a Pakistan-attributed nation-state APT group with an espionage motive.

96TTPs
7exploited
51malware
AdvancedProfile →
BitterPakistan
aka T-APT-17 · HAZY TIGER · Orange Yali +3
Nation-state APTIdeology

Bitter is a Pakistan-attributed nation-state APT group with an ideological motive.

69TTPs
16exploited
30malware
AdvancedProfile →
Gorgon GroupPakistan
aka Subaat · ATK 92 · TAG-CR5 +2
CybercrimeEspionage

Gorgon Group is a Pakistan-attributed cybercrime syndicate with an espionage motive.

17TTPs
2exploited
12malware
AdvancedProfile →
Donot TeamPakistan
aka APT-C-35 · Origami Elephant · SectorE02 +1
Nation-state APTEspionage

Donot Team is a Pakistan-attributed nation-state APT group with an espionage motive.

13TTPs
4exploited
9malware
AdvancedProfile →
Stealth Mango and TangeloPakistan
UnclassifiedUnknown

Stealth Mango and Tangelo is a Pakistan-attributed threat actor group.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Cosmic Leopard, Operation Celestial ForcePakistan
aka Cosmic Leopard · Operation Celestial Force
Nation-state APTEspionage

Cosmic Leopard, Operation Celestial Force is a Pakistan-attributed nation-state APT group with an espionage motive. It targets organisations in India.

0TTPs
–No CVE data
2malware
Not ratedProfile →
TAG-140Pakistan
UnclassifiedUnknown

TAG-140 is a Pakistan-attributed threat actor group.

0TTPs
–No CVE data
2malware
Not ratedProfile →
GnosticplayersPakistan
CybercrimeFinancial

Gnosticplayers is a Pakistan-attributed cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.