Skip to content
Threat actors by targeted sector

Threat Actors Targeting The Legal Sector.

Brandefense tracks 102 threat actors known to target the Legal sector. The most documented are Kimsuky, APT28 and Sandworm.

57 of 57 published profiles shown

Aurora
aka Aurora Ransomware · Zorro Ransomware · Zorro
RansomwareFinancial

Aurora is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
M3rx
RansomwareFinancial

M3rx is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Titan
RansomwareFinancial

Titan is a ransomware group with a financial motive. It targets 8 sectors, including Technology and Manufacturing, in 12 countries, including the United States and India.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Silentransomgroup
RansomwareFinancial

Silentransomgroup is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Booba-project
RansomwareFinancial

Booba-project is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Morpheus
RansomwareFinancial

Morpheus is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Insomnia
RansomwareFinancial

Insomnia is a ransomware group with a financial motive. It targets 9 sectors, including Government and Technology, in the United States and Panama.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Mamba
aka HDDCryptor
RansomwareFinancial

Mamba is a ransomware group with a financial motive. It targets 8 sectors, including Government and Technology, in 4 countries, including the United States and India.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Cry0
RansomwareFinancial

Cry0 is a ransomware group with a financial motive. It targets 4 sectors, including Government and Manufacturing, in 3 countries, including the United States and Canada.

0TTPs
–No CVE data
1malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.