Skip to content
Threat actors by targeted country

Threat Actors Targeting Australia.

Brandefense tracks 243 threat actors known to target Australia. The most documented are APT28, Kimsuky and Lazarus Group. The sectors they target most are Manufacturing, Technology and Government.

168 of 243 published profiles shown

ActorTypeOriginMotivationSophisticationExploited CVEsTop malware
Akira ransomware0 aliasesCybercrimeUnattributedFinancialIntermediate–Cl0p
Xorcat0 aliasesCybercrimeUnattributedFinancialIntermediate––
0xfay0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Claudexxx0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Root Phantom0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Mr. Hanz Xploit0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Vice Society3 aliasesRansomwareUnattributedFinancialModerate–BlackCat
Cosmic Lynx0 aliasesUnclassifiedUnattributedUnknownNot rated––
Azraelzer0d4y0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Trigona0 aliasesRansomwareUnattributedFinancialAdvanced–Trigona
Shadow Campaigns0 aliasesUnclassifiedUnattributedIdeologyAdvanced–DKnife
Threeam1 aliasRansomwareUnattributedFinancialExpert–3AM
Bytez70 aliasesUnclassifiedUnattributedIdeologyMinimal––
Chinafans0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Deadlock0 aliasesRansomwareUnattributedFinancialAdvanced–ABYSSWORKER
Irene1 aliasUnclassifiedUnattributedIdeologyMinimal––
KILLNET0 aliasesUnclassifiedUnattributedIdeologyIntermediate–Mirai Botnet
Poloss0 aliasesUnclassifiedUnattributedIdeologyMinimal––
XYZ0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Frenshyny0 aliasesUnclassifiedUnattributedUnknownNot rated––
Sarcoma1 aliasRansomwareUnattributedFinancialModerate–Sarcoma
Abyss3 aliasesRansomwareUnattributedFinancialModerate–Abyss
Worldleaks1 aliasRansomwareUnattributedFinancialIntermediate–Everest
TECHNETIUM0 aliasesUnclassifiedUnattributedUnknownNot rated–China Chopper
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.