Skip to content
Threat actors by targeted sector

Threat Actors Targeting The Food and Agriculture Sector.

Brandefense tracks 162 threat actors known to target the Food and Agriculture sector. The most documented are Kimsuky, Sandworm and APT35.

96 of 162 published profiles shown

Orangeworm
aka G0071
Nation-state APTEspionage

Orangeworm is a nation-state APT group with an espionage motive.

23TTPs
–No CVE data
8malware
AdvancedProfile →
DustSquadRussia
aka APTC34 · Nomadic Octopus
Nation-state APTEspionage

DustSquad is a Russia-attributed nation-state APT group with an espionage motive.

23TTPs
–No CVE data
2malware
AdvancedProfile →
Hunters
RansomwareFinancial

Hunters is a ransomware group with a financial motive.

22TTPs
–No CVE data
6malware
AdvancedProfile →
Lockbit5
aka lockbit5 Team · LockBit Black · LockBit 4.0
RansomwareFinancial

Lockbit5 is a ransomware group with a financial motive.

22TTPs
–No CVE data
20malware
AdvancedProfile →
LeafminerIran
aka Raspite · Flash Kitten · G0077
Nation-state APTEspionage

Leafminer is an Iran-attributed nation-state APT group with an espionage motive.

20TTPs
1exploited
14malware
AdvancedProfile →
RansomHouse
aka ransomhouse Team
RansomwareFinancial

RansomHouse is a ransomware group with a financial motive.

20TTPs
–No CVE data
21malware
ModerateProfile →
Direwolf
RansomwareFinancial

Direwolf is a ransomware group with a financial motive.

20TTPs
–No CVE data
12malware
IntermediateProfile →
Sinobi
aka sinobi Team
RansomwareFinancial

Sinobi is a ransomware group with a financial motive.

19TTPs
–No CVE data
24malware
IntermediateProfile →
Everest
aka Everest Team · Everest Ransomware Group · Everest Group
RansomwareFinancial

Everest is a ransomware group with a financial motive.

19TTPs
–No CVE data
15malware
IntermediateProfile →
Bravox
RansomwareFinancial

Bravox is a ransomware group with a financial motive.

19TTPs
–No CVE data
10malware
IntermediateProfile →
Chaos
aka Chaos RaaS
RansomwareFinancial

Chaos is a ransomware group with a financial motive.

17TTPs
1exploited
4malware
AdvancedProfile →
Kraken
aka Kraken Ransomware
RansomwareFinancial

Kraken is a ransomware group with a financial motive.

18TTPs
–No CVE data
1malware
AdvancedProfile →
Lynx
aka lynx Team
RansomwareFinancial

Lynx is a ransomware group with a financial motive.

17TTPs
–No CVE data
37malware
IntermediateProfile →
Embargo
RansomwareFinancial

Embargo is a ransomware group with a financial motive.

15TTPs
–No CVE data
3malware
AdvancedProfile →
MEOW
aka meow Team
RansomwareFinancial

MEOW is a ransomware group with a financial motive.

15TTPs
–No CVE data
1malware
AdvancedProfile →
Hunters International
aka hunters Team
RansomwareFinancial

Hunters International is a ransomware group with a financial motive.

15TTPs
–No CVE data
4malware
IntermediateProfile →
Hive
aka hive Team
RansomwareFinancial

Hive is a ransomware group with a financial motive.

6TTPs
6exploited
21malware
AdvancedProfile →
FIN5Russia
aka G0053
CybercrimeFinancial

FIN5 is a Russia-attributed cybercrime syndicate with a financial motive.

12TTPs
–No CVE data
8malware
ModerateProfile →
Deep PandaChina
aka Shell Crew · WebMasters · KungFu Kittens +8
Nation-state APTEspionage

Deep Panda is a China-attributed nation-state APT group with an espionage motive.

11TTPs
–No CVE data
15malware
AdvancedProfile →
Underground
RansomwareFinancial

Underground is a ransomware group with a financial motive.

11TTPs
–No CVE data
2malware
Not ratedProfile →
Cactus
aka cactus Team
RansomwareFinancial

Cactus is a ransomware group with a financial motive.

7TTPs
3exploited
17malware
AdvancedProfile →
Anubis
aka Anubis Ransomware · BankBot · Maza-in
RansomwareFinancial

Anubis is a ransomware group with a financial motive.

10TTPs
–No CVE data
1malware
AdvancedProfile →
Devman
aka Devman 2.0
RansomwareFinancial

Devman is a ransomware group with a financial motive.

9TTPs
–No CVE data
5malware
Not ratedProfile →
CleaverIran
aka Threat Group 2889 · TG-2889 · Cutting Kitten +2
CybercrimeEspionage

Cleaver is an Iran-attributed cybercrime syndicate with an espionage motive.

5TTPs
4exploited
23malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.