Skip to content
CybercrimeFinancial

RAMDOR

RAMDOR is an Israel-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Technology, and Construction and Real Estate sectors in Israel. It uses 2 MITRE ATT&CK techniques.

Origin
Israel
Techniques
2
Exploited CVEs
No CVE data
Record updated

Who They Target.

How They Operate · MITRE ATT&CK.

2 techniques across 1 of 14 tactics

Reconnaissance·

Resource Development·

Initial Access2

T1189
Drive-by Compromise
T1190
Exploit Public-Facing Application

Execution·

Persistence·

Privilege Escalation·

Defense Evasion·

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact·

About RAMDOR.

An arm of an Israeli TOP Group that allegedly compromised the cloud and on-premises infrastructure of an Israeli engineering firm.

Last updated Oct 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.