Skip to content
Threat actors by targeted sector

Threat Actors Targeting The Construction and Real Estate Sector.

Brandefense tracks 203 threat actors known to target the Construction and Real Estate sector. The most documented are Kimsuky, APT28 and Lazarus Group.

96 of 143 published profiles shown

Frag
RansomwareFinancial

Frag is a ransomware group with a financial motive.

7TTPs
–No CVE data
9malware
IntermediateProfile →
Payoutsking
aka PK Crew · Payout$King · PayoutsMafia
RansomwareFinancial

Payoutsking is a ransomware group with a financial motive.

7TTPs
–No CVE data
3malware
IntermediateProfile →
Payload
RansomwareFinancial

Payload is a ransomware group with a financial motive.

6TTPs
–No CVE data
3malware
IntermediateProfile →
Zawoo
aka Zawoo Team
RansomwareFinancial

Zawoo is a ransomware group with a financial motive.

6TTPs
–No CVE data
2malware
Not ratedProfile →
Ailock
RansomwareFinancial

Ailock is a ransomware group with a financial motive.

6TTPs
–No CVE data
1malware
AdvancedProfile →
0apt
RansomwareFinancial

0apt is a ransomware group with a financial motive. It targets the Construction and Real Estate sector in the United States and France. It uses 6 MITRE ATT&CK techniques.

6TTPs
–No CVE data
1malware
AdvancedProfile →
Vice Society
aka DEV-0832 · VICE SPIDER · vicesociety Team
RansomwareFinancial

Vice Society is a ransomware group with a financial motive.

5TTPs
–No CVE data
12malware
ModerateProfile →
Threeam
aka 3Am
RansomwareFinancial

Threeam is a ransomware group with a financial motive.

4TTPs
–No CVE data
6malware
ExpertProfile →
Deadlock
RansomwareFinancial

Deadlock is a ransomware group with a financial motive.

4TTPs
–No CVE data
16malware
AdvancedProfile →
RevengeHotels
aka TA558
CybercrimeFinancial

RevengeHotels is a cybercrime syndicate with a financial motive.

4TTPs
–No CVE data
23malware
AdvancedProfile →
Sarcoma
aka Sarcoma Ransomware Group
RansomwareFinancial

Sarcoma is a ransomware group with a financial motive.

3TTPs
–No CVE data
1malware
ModerateProfile →
Abyss
aka Abyss Locker · Abyss-data · Infoleak222
RansomwareFinancial

Abyss is a ransomware group with a financial motive.

3TTPs
–No CVE data
2malware
ModerateProfile →
Worldleaks
aka worldleaks Team
RansomwareFinancial

Worldleaks is a ransomware group with a financial motive.

3TTPs
–No CVE data
4malware
IntermediateProfile →
Cephalus
RansomwareFinancial

Cephalus is a ransomware group with a financial motive.

3TTPs
–No CVE data
12malware
AdvancedProfile →
Blacknevas
aka Trial Recovery
RansomwareFinancial

Blacknevas is a ransomware group with a financial motive.

3TTPs
–No CVE data
14malware
AdvancedProfile →
DataLeak
RansomwareFinancial

DataLeak is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
Not ratedProfile →
StormouS-X
aka Stormous · stormous Team · STMX +1
RansomwareFinancial

StormouS-X is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
InnovatorProfile →
Coinbasecartel
aka coinbasecartel Team
RansomwareFinancial

Coinbasecartel is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
AdvancedProfile →
Ransomedvc
aka RansomForums · RansomVC · Ransomed
RansomwareFinancial

Ransomedvc is a ransomware group with a financial motive.

1TTPs
–No CVE data
3malware
AdvancedProfile →
Quantum
aka QuantumLocker · DagonLocker · Mount-Locker +5
RansomwareFinancial

Quantum is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
AdvancedProfile →
Radar
aka Radar Ransomware
RansomwareFinancial

Radar is a ransomware group with a financial motive.

1TTPs
–No CVE data
2malware
AdvancedProfile →
Red Ransomware
aka Red CryptoApp
RansomwareFinancial

Red Ransomware is a ransomware group with a financial motive.

0TTPs
1exploited
4malware
ModerateProfile →
Kazu
RansomwareFinancial

Kazu is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
Not ratedProfile →
Genesis
RansomwareFinancial

Genesis is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.