Skip to content
Threat actors by targeted country

Threat Actors Targeting Belarus.

Brandefense tracks 42 threat actors known to target Belarus. The most documented are APT28, Sandworm and APT29. The sectors they target most are Government, Defense and Aerospace, and Finance.

13 of 13 published profiles shown

SnakeRussia
aka Snake Ransomware · IRON HUNTER · Group 88 +6
RansomwareEspionage

Snake is a Russia-attributed ransomware group with an espionage motive.

150TTPs
11exploited
55malware
StrategicProfile →
Earth LuscaChina
aka TAG-22 · Charcoal Typhoon · CHROMIUM +1
Nation-state APTEspionage

Earth Lusca is a China-attributed nation-state APT group with an espionage motive.

93TTPs
37exploited
83malware
AdvancedProfile →
menuPassChina
aka Cicada · POTASSIUM · Stone Panda +5
Nation-state APTEspionage

menuPass is a China-attributed nation-state APT group with an espionage motive.

100TTPs
22exploited
75malware
AdvancedProfile →
InceptionRussia
aka Inception Framework · Cloud Atlas · Oxygen +7
Nation-state APTEspionage

Inception is a Russia-attributed nation-state APT group with an espionage motive.

91TTPs
7exploited
36malware
AdvancedProfile →
Core Werewolf
Nation-state APTEspionage

Core Werewolf is a nation-state APT group with an espionage motive.

21TTPs
–No CVE data
12malware
Not ratedProfile →
MoustachedBouncerBelarus
aka G1019
Nation-state APTEspionage

MoustachedBouncer is a Belarus-attributed nation-state APT group with an espionage motive.

14TTPs
1exploited
3malware
AdvancedProfile →
TA459China
aka G0062
Nation-state APTEspionage

TA459 is a China-attributed nation-state APT group with an espionage motive.

11TTPs
2exploited
7malware
ExpertProfile →
CalypsoChina
aka Bronze Medley
Nation-state APTEspionage

Calypso is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in 11 countries, including India and Brazil.

0TTPs
–No CVE data
19malware
Not ratedProfile →
Icefog, Dagger PandaChina
aka Icefog · Dagger Panda · ATK 23 +1
Nation-state APTEspionage

Icefog, Dagger Panda is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
4malware
Not ratedProfile →
Twisted PandaChina
Nation-state APTEspionage

Twisted Panda is a China-attributed nation-state APT group with an espionage motive. It targets the Defense and Aerospace sector in Russia and Belarus.

0TTPs
–No CVE data
1malware
Not ratedProfile →
MikroceenChina
aka SixLittleMonkeys
Nation-state APTEspionage

Mikroceen is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
7malware
Not ratedProfile →
ItaDuke
aka DarkUniverse · SIG27
Nation-state APTEspionage

ItaDuke is a nation-state APT group with an espionage motive. It targets the Defense and Aerospace sector in 8 countries, including Russia and Iran.

0TTPs
–No CVE data
4malware
Not ratedProfile →
Roaming TigerChina
aka Rotten Tomato · CTG-7273 · Bronze Woodland
Nation-state APTEspionage

Roaming Tiger is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 7 countries, including Russia and Ukraine.

0TTPs
–No CVE data
3malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.