Skip to content
Threat actors by targeted country

Threat Actors Targeting Australia.

Brandefense tracks 230 threat actors known to target Australia. The most documented are Kimsuky, APT28 and Lazarus Group. The sectors they target most are Manufacturing, Technology and Government.

72 of 118 published profiles shown

APT73
aka Eraleign (apt73) · Bashe · Eraleig Ransomware
RansomwareFinancial

APT73 is a ransomware group with a financial motive.

31TTPs
–No CVE data
22malware
IntermediateProfile →
WarlockChina
aka Longlegs
RansomwareFinancial

Warlock is a China-attributed ransomware group with a financial motive.

29TTPs
2exploited
28malware
AdvancedProfile →
Helldown
RansomwareFinancial

Helldown is a ransomware group with a financial motive.

27TTPs
2exploited
8malware
AdvancedProfile →
NovaRussia
aka nova Team · Ransomware Operators · Nova affiliate program management
RansomwareFinancial

Nova is a Russia-attributed ransomware group with a financial motive.

25TTPs
–No CVE data
21malware
AdvancedProfile →
Fog Ransomware
CybercrimeFinancial

Fog Ransomware is a cybercrime syndicate with a financial motive.

9TTPs
16exploited
19malware
AdvancedProfile →
Termite
aka Termite Ransomware · Velvet Tempest · DEV-0504
RansomwareFinancial

Termite is a ransomware group with a financial motive.

23TTPs
1exploited
21malware
AdvancedProfile →
Funksec
aka funksec Team
RansomwareFinancial

Funksec is a ransomware group with a financial motive.

23TTPs
–No CVE data
6malware
LowProfile →
Hunters
RansomwareFinancial

Hunters is a ransomware group with a financial motive.

22TTPs
–No CVE data
6malware
AdvancedProfile →
Lockbit5
aka lockbit5 Team · LockBit Black · LockBit 4.0
RansomwareFinancial

Lockbit5 is a ransomware group with a financial motive.

22TTPs
–No CVE data
20malware
AdvancedProfile →
RansomHouse
aka ransomhouse Team
RansomwareFinancial

RansomHouse is a ransomware group with a financial motive.

20TTPs
–No CVE data
21malware
ModerateProfile →
Direwolf
RansomwareFinancial

Direwolf is a ransomware group with a financial motive.

20TTPs
–No CVE data
12malware
IntermediateProfile →
Sinobi
aka sinobi Team
RansomwareFinancial

Sinobi is a ransomware group with a financial motive.

19TTPs
–No CVE data
24malware
IntermediateProfile →
Everest
aka Everest Team · Everest Ransomware Group · Everest Group
RansomwareFinancial

Everest is a ransomware group with a financial motive.

19TTPs
–No CVE data
15malware
IntermediateProfile →
Chaos
aka Chaos RaaS
RansomwareFinancial

Chaos is a ransomware group with a financial motive.

17TTPs
1exploited
4malware
AdvancedProfile →
Lynx
aka lynx Team
RansomwareFinancial

Lynx is a ransomware group with a financial motive.

17TTPs
–No CVE data
37malware
IntermediateProfile →
Embargo
RansomwareFinancial

Embargo is a ransomware group with a financial motive.

15TTPs
–No CVE data
3malware
AdvancedProfile →
MEOW
aka meow Team
RansomwareFinancial

MEOW is a ransomware group with a financial motive.

15TTPs
–No CVE data
1malware
AdvancedProfile →
Hunters International
aka hunters Team
RansomwareFinancial

Hunters International is a ransomware group with a financial motive.

15TTPs
–No CVE data
4malware
IntermediateProfile →
Hive
aka hive Team
RansomwareFinancial

Hive is a ransomware group with a financial motive.

6TTPs
6exploited
21malware
AdvancedProfile →
Underground
RansomwareFinancial

Underground is a ransomware group with a financial motive.

11TTPs
–No CVE data
2malware
Not ratedProfile →
Cactus
aka cactus Team
RansomwareFinancial

Cactus is a ransomware group with a financial motive.

7TTPs
3exploited
17malware
AdvancedProfile →
Anubis
aka Anubis Ransomware · BankBot · Maza-in
RansomwareFinancial

Anubis is a ransomware group with a financial motive.

10TTPs
–No CVE data
1malware
AdvancedProfile →
RagnarLocker
aka VIKING SPIDER
RansomwareFinancial

RagnarLocker is a ransomware group with a financial motive.

2TTPs
6exploited
6malware
AdvancedProfile →
Settra
RansomwareFinancial

Settra is a ransomware group with a financial motive.

7TTPs
–No CVE data
2malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.