Threat actors by attributed origin

Syria-Attributed Threat Actors.

Brandefense tracks 3 threat actors attributed to Syria. The most documented are APT-C-27, Syrian Electronic Army (SEA), Deadeye Jackal and Pat Bear, APT-C-37. The sectors they target most are Defense and Aerospace, Government, and Media and Entertainment.

Top target sectorsDefense and Aerospace Government Media and Entertainment

MotivationEspionage Financial Ideology

3 of 3 published profiles shown

Cards Table

Actor	Type	Origin	Motivation	Sophistication	Exploited CVEs	Top malware
APT-C-274 aliases	Nation-state APT	Syria	Espionage	Intermediate	1	–
Syrian Electronic Army (SEA), Deadeye Jackal5 aliases	Nation-state APT	Syria	Espionage	Not rated	–	–
Pat Bear, APT-C-373 aliases	Unclassified	Syria	Unknown	Not rated	–	DroidJack

On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.

Each profile includes the actor's origin, type, active date range, target sectors and countries, MITRE ATT&CK TTPs, related CVEs, malware and tools used, recent campaigns, and motivation. Full IOC feeds and YARA rules are available on the Brandefense platform.
Yes. ATLAS Threat Actors DB covers nation-state APT groups such as Lazarus Group, cybercrime syndicates such as Scattered Spider, and ransomware operations. All profiles are maintained by Brandefense analysts.
IOC feeds, YARA rules, and MITRE ATT&CK navigator exports are available through the full Brandefense platform. Request a demo to get access.

Syria-Attributed Threat Actors.

Common Questions.

What information is in an ATLAS threat actor profile?

Does ATLAS cover both APT groups and ransomware gangs?

How do I get IOC feeds and YARA rules for a specific threat actor?