Skip to content
Threat actors by targeted sector

Threat Actors Targeting The Manufacturing Sector.

Brandefense tracks 408 threat actors known to target the Manufacturing sector. The most documented are APT28, Kimsuky and Lazarus Group.

168 of 205 published profiles shown

CiphBit
RansomwareFinancial

CiphBit is a ransomware group with a financial motive.

0TTPs
–No CVE data
2malware
LowProfile →
WereWolves
RansomwareFinancial

WereWolves is a ransomware group with a financial motive.

0TTPs
–No CVE data
7malware
ModerateProfile →
Malas
aka malas Team
RansomwareFinancial

Malas is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Metaencryptor
RansomwareFinancial

Metaencryptor is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Snatch
aka snatch Team · Team Truniger
RansomwareFinancial

Snatch is a ransomware group with a financial motive.

0TTPs
–No CVE data
6malware
AdvancedProfile →
Space Bears
aka spacebears Team · Space Bear
RansomwareFinancial

Space Bears is a ransomware group with a financial motive.

0TTPs
–No CVE data
3malware
ModerateProfile →
Avaddon
aka avaddon Team · Riddle Spider
RansomwareFinancial

Avaddon is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
RA Group
aka Raworld
RansomwareFinancial

RA Group is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
IntermediateProfile →
Kairos
RansomwareFinancial

Kairos is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Maze
aka ChaCha Ransomware · TA2101 · Maze Team +2
RansomwareFinancial

Maze is a ransomware group with a financial motive.

0TTPs
–No CVE data
12malware
AdvancedProfile →
Pear
aka Pure Extraction And Ransom
RansomwareFinancial

Pear is a ransomware group with a financial motive. It targets 12 sectors, including Government and Technology, in 11 countries, including the United States and France.

0TTPs
–No CVE data
1malware
IntermediateProfile →
Blacklock
aka El Dorado
RansomwareFinancial

Blacklock is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
AdvancedProfile →
AvosLocker
aka Avos
RansomwareFinancial

AvosLocker is a ransomware group with a financial motive.

0TTPs
–No CVE data
4malware
AdvancedProfile →
FxmspKazakhstan
aka ATK 134 · TAG-CR17
CybercrimeFinancial

Fxmsp is a Kazakhstan-attributed cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
3malware
Not ratedProfile →
Securotrop
RansomwareFinancial

Securotrop is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
ExpertProfile →
Ralord
aka Nova RaaS
RansomwareFinancial

Ralord is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
AdvancedProfile →
Orova
RansomwareFinancial

Orova is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Braincipher
RansomwareFinancial

Braincipher is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
UnSafe
RansomwareFinancial

UnSafe is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
MedUSlocker
aka Medusalocker
RansomwareFinancial

MedUSlocker is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Arcus Media
RansomwareFinancial

Arcus Media is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Blackout
RansomwareFinancial

Blackout is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Hagga
aka Aggah · TH-157 · Operation “Roma225” +1
CybercrimeFinancial

Hagga is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
5malware
Not ratedProfile →
Apos
aka Apos Security
RansomwareFinancial

Apos is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.