Skip to content
brandefense.io
Request A Demo
RansomwareEspionageAdvanced sophistication · State-backed

Slug

Slug is a ransomware group with an espionage motive, tracked by Brandefense. It targets the Transportation and Logistics sector in Ireland. It uses 1 MITRE ATT&CK technique.

Also known as
  • Smoke Sandstorm
  • GalaxyGato
  • Subtle Snail
Request IOC feedRequest ATT&CK export
Techniques
1
Exploited CVEs
No CVE data
First seen
Jan 19, 2024
Last seen
Jan 19, 2024
Record updated

Who They Target.

Sectors · 1
Countries · 1
Labelsransomware

About Slug.

Slug is a very obscure ransomware or extortion group with only a single documented victim (AerCap, the aircraft leasing company) recorded on ransomware tracking platforms; no detailed threat intelligence reports exist for this group.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.