Skip to content
Nation-state APTEspionageAdvanced sophistication · State-backed

Sowbug

Sowbug is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Government and Diplomacy sectors in 5 countries, including Brazil and Malaysia. It uses 11 MITRE ATT&CK techniques and exploits 3 known CVEs.

Also known as
  • G0054
Techniques
11
Exploited CVEs
3
First seen
Jan 1, 2015
Last seen
Nov 7, 2017
Record updated

Who They Target.

Labelsespionage

About Sowbug.

Sowbug is a threat group that has conducted targeted attacks against organizations in South America and Southeast Asia, particularly government entities, since at least 2015.

Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.