Skip to content
Threat actors by targeted sector

Threat Actors Targeting The Media and Entertainment Sector.

Brandefense tracks 236 threat actors known to target the Media and Entertainment sector. The most documented are Kimsuky, APT28 and Lazarus Group.

120 of 236 published profiles shown

Laundry BearRussia
Nation-state APTIdeology

Laundry Bear is a Russia-attributed nation-state APT group with an ideological motive. It targets 8 sectors, including Government and Technology, in Ukraine.

33TTPs
1exploited
11malware
AdvancedProfile →
NoName057(16)Russia
aka 05716nnm · Nnm05716 · NoName057
UnclassifiedIdeology

NoName057(16) is a Russia-attributed threat actor group with an ideological motive.

33TTPs
–No CVE data
2malware
ModerateProfile →
APT1China
aka Comment Crew · Comment Group · Comment Panda +11
Nation-state APTEspionage

APT1 is a China-attributed nation-state APT group with an espionage motive.

32TTPs
1exploited
47malware
AdvancedProfile →
Ferocious KittenIran
aka G0137
Nation-state APTEspionage

Ferocious Kitten is an Iran-attributed nation-state APT group with an espionage motive.

31TTPs
1exploited
4malware
AdvancedProfile →
APT73
aka Eraleign (apt73) · Bashe · Eraleig Ransomware
RansomwareFinancial

APT73 is a ransomware group with a financial motive.

31TTPs
–No CVE data
22malware
IntermediateProfile →
TA2541
CybercrimeFinancial

TA2541 is a cybercrime syndicate with a financial motive.

30TTPs
1exploited
18malware
ModerateProfile →
TEMP.VelesRussia
aka XENOTIME · Triton Actor · ATK 91 +1
Nation-state APTEspionage

TEMP.Veles is a Russia-attributed nation-state APT group with an espionage motive.

29TTPs
1exploited
22malware
AdvancedProfile →
Helldown
RansomwareFinancial

Helldown is a ransomware group with a financial motive.

27TTPs
2exploited
8malware
AdvancedProfile →
Silent LibrarianIran
aka TA407 · COBALT DICKENS · Mabna Institute +4
Nation-state APTEspionage

Silent Librarian is an Iran-attributed nation-state APT group with an espionage motive.

14TTPs
14exploited
5malware
AdvancedProfile →
Molerats
aka Operation Molerats · Gaza Cybergang
Nation-state APTEspionage

Molerats is a nation-state APT group with an espionage motive.

27TTPs
1exploited
25malware
AdvancedProfile →
NaikonChina
Nation-state APTEspionage

Naikon is a China-attributed nation-state APT group with an espionage motive.

27TTPs
1exploited
38malware
AdvancedProfile →
Putter PandaChina
aka 4HCrew · APT2 · G0024 +6
Nation-state APTEspionage

Putter Panda is a China-attributed nation-state APT group with an espionage motive.

18TTPs
10exploited
23malware
AdvancedProfile →
Admin@338China
aka Temper Panda · Magnesium · Team338 +1
Nation-state APTEspionage

Admin@338 is a China-attributed nation-state APT group with an espionage motive.

25TTPs
3exploited
14malware
AdvancedProfile →
Ajax Security TeamIran
aka Operation Woolen-Goldfish · AjaxTM · Rocket Kitten +4
Nation-state APTEspionage

Ajax Security Team is an Iran-attributed nation-state APT group with an espionage motive.

18TTPs
9exploited
10malware
AdvancedProfile →
Cinnamon TempestChina
aka DEV-0401 · Emperor Dragonfly · BRONZE STARLIGHT +3
CybercrimeFinancial

Cinnamon Tempest is a China-attributed cybercrime syndicate with a financial motive.

19TTPs
8exploited
20malware
AdvancedProfile →
IndigoZebraChina
aka G0136
Nation-state APTEspionage

IndigoZebra is a China-attributed nation-state APT group with an espionage motive.

27TTPs
–No CVE data
8malware
AdvancedProfile →
APT30China
aka Override Panda · BRONZE GENEVA · BRONZE STERLING +2
Nation-state APTEspionage

APT30 is a China-attributed nation-state APT group with an espionage motive.

25TTPs
1exploited
31malware
AdvancedProfile →
NovaRussia
aka nova Team · Ransomware Operators · Nova affiliate program management
RansomwareFinancial

Nova is a Russia-attributed ransomware group with a financial motive.

25TTPs
–No CVE data
21malware
AdvancedProfile →
PhantomCore
aka Fairy Trickster · Rainbow Hyena
UnclassifiedIdeology

PhantomCore is a threat actor group with an ideological motive. It targets 14 sectors, including Government and Technology, in Russia and Belarus.

23TTPs
2exploited
31malware
AdvancedProfile →
Fog Ransomware
CybercrimeFinancial

Fog Ransomware is a cybercrime syndicate with a financial motive.

9TTPs
16exploited
19malware
AdvancedProfile →
PittyTigerChina
aka G0011 · PITTY PANDA · Temp.Pittytiger +2
Nation-state APTEspionage

PittyTiger is a China-attributed nation-state APT group with an espionage motive.

19TTPs
5exploited
31malware
AdvancedProfile →
Dark CaracalLebanon
aka ATK 27 · TAG-CT3 · G0070 +1
Nation-state APTEspionage

Dark Caracal is a Lebanon-attributed nation-state APT group with an espionage motive.

24TTPs
–No CVE data
8malware
AdvancedProfile →
Krybit
aka krybit Team
RansomwareFinancial

Krybit is a ransomware group with a financial motive. It targets 14 sectors, including Government and Technology, in 35 countries, including India and France.

24TTPs
–No CVE data
8malware
AdvancedProfile →
Naikon APT
UnclassifiedIdeology

Naikon APT is a threat actor group with an ideological motive.

23TTPs
1exploited
20malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.