Skip to content
Threat actors by targeted country

Threat Actors Targeting Argentina.

Brandefense tracks 103 threat actors known to target Argentina. The most documented are Sandworm, APT29 and APT38. The sectors they target most are Technology, Manufacturing and Government.

24 of 66 published profiles shown

APT38North Korea
aka NICKEL GLADSTONE · BeagleBoyz · Bluenoroff +6
Nation-state APTFinancial

APT38 is a North Korea-attributed nation-state APT group with a financial motive.

153TTPs
65exploited
139malware
AdvancedProfile →
AKIRA
aka Megazord · Akira Team · GOLD SAHARA +1
RansomwareFinancial

AKIRA is a ransomware group with a financial motive.

137TTPs
54exploited
118malware
AdvancedProfile →
Shinyhunters
aka shinyhunters Team · UNC6240 · Bling Libra +2
RansomwareFinancial

Shinyhunters is a ransomware group with a financial motive.

150TTPs
19exploited
143malware
AdvancedProfile →
Lockbit
aka LockBit3.0 · LockBit2.0 · LockBit Ransomware operatörleri +5
RansomwareFinancial

Lockbit is a ransomware group with a financial motive.

133TTPs
32exploited
115malware
AdvancedProfile →
QilinRussia
aka Qilin Team · Water Galura · Qilin Ransomware +2
RansomwareFinancial

Qilin is a Russia-attributed ransomware group with a financial motive.

127TTPs
18exploited
139malware
AdvancedProfile →
RansomHub
aka RansomHub Team · RansomHub Ransomware · Water Bakunawa
RansomwareFinancial

RansomHub is a ransomware group with a financial motive.

111TTPs
30exploited
72malware
AdvancedProfile →
DragonForceMalaysia
aka DragonForce Team · DFRC
RansomwareFinancial

DragonForce is a Malaysia-attributed ransomware group with a financial motive.

109TTPs
24exploited
71malware
AdvancedProfile →
Clop
aka Lace Tempest
RansomwareFinancial

Clop is a ransomware group with a financial motive.

91TTPs
31exploited
95malware
AdvancedProfile →
BianLian
aka BianLian Team
RansomwareFinancial

BianLian is a ransomware group with a financial motive.

99TTPs
13exploited
37malware
AdvancedProfile →
INC Ransom
aka GOLD IONIC · INC Ransom Team
RansomwareFinancial

INC Ransom is a ransomware group with a financial motive.

69TTPs
36exploited
70malware
ModerateProfile →
TA505
aka ATK103 · CHIMBORAZO · DEV-0950 +8
CybercrimeFinancial

TA505 is a cybercrime syndicate with a financial motive.

77TTPs
27exploited
27malware
ModerateProfile →
Medusa
aka Medusa Team
RansomwareFinancial

Medusa is a ransomware group with a financial motive.

80TTPs
23exploited
28malware
AdvancedProfile →
Safepay
aka SafePay Team
RansomwareFinancial

Safepay is a ransomware group with a financial motive.

75TTPs
18exploited
30malware
ModerateProfile →
BlackByte
aka blackbyte Team · Hecamede
RansomwareFinancial

BlackByte is a ransomware group with a financial motive.

84TTPs
7exploited
15malware
AdvancedProfile →
Cobalt GroupRussia
aka GOLD KINGSWOOD · Cobalt Gang · Cobalt Spider +4
CybercrimeFinancial

Cobalt Group is a Russia-attributed cybercrime syndicate with a financial motive.

69TTPs
17exploited
78malware
ModerateProfile →
Mallox
aka TargetCompany · FARGO · Tohnichi
RansomwareFinancial

Mallox is a ransomware group with a financial motive.

47TTPs
23exploited
14malware
ModerateProfile →
RevilRussia
aka Sodinokibi
RansomwareFinancial

Revil is a Russia-attributed ransomware group with a financial motive.

45TTPs
25exploited
16malware
AdvancedProfile →
UNC4736North Korea
aka Gleaming Pisces · UNC1720 · AppleJeus
Nation-state APTFinancial

UNC4736 is a North Korea-attributed nation-state APT group with a financial motive.

54TTPs
14exploited
27malware
AdvancedProfile →
ALPHV/BlackCat
aka Black Cat · ALPHV · Noberus +1
RansomwareFinancial

ALPHV/BlackCat is a ransomware group with a financial motive.

37TTPs
16exploited
48malware
AdvancedProfile →
Rhysida
aka Rhysida Team
RansomwareFinancial

Rhysida is a ransomware group with a financial motive.

52TTPs
–No CVE data
38malware
ModerateProfile →
Evilnum
aka Jointworm · TA4563 · G0120 +1
CybercrimeFinancial

Evilnum is a cybercrime syndicate with a financial motive.

44TTPs
–No CVE data
20malware
ModerateProfile →
Thegentlemen
aka Storm-2697 · The Gentlemen Group
RansomwareFinancial

Thegentlemen is a ransomware group with a financial motive.

42TTPs
1exploited
54malware
AdvancedProfile →
Lapsus$Brazil
aka DEV-0537 · Strawberry Tempest · Slippy Spider +1
RansomwareFinancial

Lapsus$ is a Brazil-attributed ransomware group with a financial motive.

39TTPs
1exploited
38malware
ModerateProfile →
Nightspire
aka nightspire Team
RansomwareFinancial

Nightspire is a ransomware group with a financial motive.

38TTPs
–No CVE data
7malware
IntermediateProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.