Skip to content
Threat actors by targeted sector

Threat Actors Targeting The Telecommunications Sector.

Brandefense tracks 248 threat actors known to target the Telecommunications sector. The most documented are Kimsuky, APT28 and Lazarus Group.

72 of 90 published profiles shown

Kraken
aka Kraken Ransomware
RansomwareFinancial

Kraken is a ransomware group with a financial motive.

18TTPs
–No CVE data
1malware
AdvancedProfile →
Lynx
aka lynx Team
RansomwareFinancial

Lynx is a ransomware group with a financial motive.

17TTPs
–No CVE data
37malware
IntermediateProfile →
Embargo
RansomwareFinancial

Embargo is a ransomware group with a financial motive.

15TTPs
–No CVE data
3malware
AdvancedProfile →
MEOW
aka meow Team
RansomwareFinancial

MEOW is a ransomware group with a financial motive.

15TTPs
–No CVE data
1malware
AdvancedProfile →
Hunters International
aka hunters Team
RansomwareFinancial

Hunters International is a ransomware group with a financial motive.

15TTPs
–No CVE data
4malware
IntermediateProfile →
Hive
aka hive Team
RansomwareFinancial

Hive is a ransomware group with a financial motive.

6TTPs
6exploited
21malware
AdvancedProfile →
Anubis
aka Anubis Ransomware · BankBot · Maza-in
RansomwareFinancial

Anubis is a ransomware group with a financial motive.

10TTPs
–No CVE data
1malware
AdvancedProfile →
Arkana
aka Arkana Security
RansomwareFinancial

Arkana is a ransomware group with a financial motive. It targets 5 sectors, including Technology and Finance, in the United States and the United Kingdom.

10TTPs
–No CVE data
2malware
IntermediateProfile →
Devman
aka Devman 2.0
RansomwareFinancial

Devman is a ransomware group with a financial motive.

9TTPs
–No CVE data
5malware
Not ratedProfile →
RagnarLocker
aka VIKING SPIDER
RansomwareFinancial

RagnarLocker is a ransomware group with a financial motive.

2TTPs
6exploited
6malware
AdvancedProfile →
AGATH.CC
CybercrimeFinancial

AGATH.CC is a cybercrime syndicate with a financial motive.

8TTPs
–No CVE data
1malware
IntermediateProfile →
Settra
RansomwareFinancial

Settra is a ransomware group with a financial motive.

7TTPs
–No CVE data
2malware
AdvancedProfile →
Payload
RansomwareFinancial

Payload is a ransomware group with a financial motive.

6TTPs
–No CVE data
3malware
IntermediateProfile →
Deadlock
RansomwareFinancial

Deadlock is a ransomware group with a financial motive.

4TTPs
–No CVE data
16malware
AdvancedProfile →
Blacknevas
aka Trial Recovery
RansomwareFinancial

Blacknevas is a ransomware group with a financial motive.

3TTPs
–No CVE data
14malware
AdvancedProfile →
Babuk2
aka Satanlock
RansomwareFinancial

Babuk2 is a ransomware group with a financial motive.

2TTPs
–No CVE data
1malware
AdvancedProfile →
DataLeak
RansomwareFinancial

DataLeak is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
Not ratedProfile →
StormouS-X
aka Stormous · stormous Team · STMX +1
RansomwareFinancial

StormouS-X is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
InnovatorProfile →
Ransomedvc
aka RansomForums · RansomVC · Ransomed
RansomwareFinancial

Ransomedvc is a ransomware group with a financial motive.

1TTPs
–No CVE data
3malware
AdvancedProfile →
Quantum
aka QuantumLocker · DagonLocker · Mount-Locker +5
RansomwareFinancial

Quantum is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
AdvancedProfile →
DarkVault
RansomwareFinancial

DarkVault is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Kill Security
aka Killsec · killsec Team
RansomwareFinancial

Kill Security is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
IntermediateProfile →
CiphBit
RansomwareFinancial

CiphBit is a ransomware group with a financial motive.

0TTPs
–No CVE data
2malware
LowProfile →
Pysa
aka Mespinoza · Pyza · pysa Team +2
RansomwareFinancial

Pysa is a ransomware group with a financial motive.

0TTPs
–No CVE data
10malware
ModerateProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.