Skip to content
Threat actors by targeted country

Threat Actors Targeting Costa Rica.

Brandefense tracks 26 threat actors known to target Costa Rica. The most documented are APT38, Lockbit and Wizard Spider. The sectors they target most are Manufacturing, Technology, and Construction and Real Estate.

20 of 20 published profiles shown

APT38North Korea
aka NICKEL GLADSTONE · BeagleBoyz · Bluenoroff +6
Nation-state APTFinancial

APT38 is a North Korea-attributed nation-state APT group with a financial motive.

153TTPs
65exploited
139malware
AdvancedProfile →
Lockbit
aka LockBit3.0 · LockBit2.0 · LockBit Ransomware operatörleri +5
RansomwareFinancial

Lockbit is a ransomware group with a financial motive.

133TTPs
32exploited
115malware
AdvancedProfile →
Wizard SpiderRussia
aka UNC1878 · TEMP.MixMaster · Grim Spider +12
CybercrimeFinancial

Wizard Spider is a Russia-attributed cybercrime syndicate with a financial motive.

83TTPs
68exploited
69malware
AdvancedProfile →
RansomHub
aka RansomHub Team · RansomHub Ransomware · Water Bakunawa
RansomwareFinancial

RansomHub is a ransomware group with a financial motive.

111TTPs
30exploited
72malware
AdvancedProfile →
DragonForceMalaysia
aka DragonForce Team · DFRC
RansomwareFinancial

DragonForce is a Malaysia-attributed ransomware group with a financial motive.

109TTPs
24exploited
71malware
AdvancedProfile →
INC Ransom
aka GOLD IONIC · INC Ransom Team
RansomwareFinancial

INC Ransom is a ransomware group with a financial motive.

69TTPs
36exploited
70malware
ModerateProfile →
Royal
aka royal Team · Team One · Royal Ransomware
RansomwareFinancial

Royal is a ransomware group with a financial motive. It targets 17 sectors, including Government and Technology, in 8 countries, including the United States and India.

47TTPs
–No CVE data
17malware
AdvancedProfile →
SilenceRussia
aka Whisper Spider · G0091 · Contract Crew +3
CybercrimeFinancial

Silence is a Russia-attributed cybercrime syndicate with a financial motive.

36TTPs
8exploited
27malware
ModerateProfile →
Thegentlemen
aka Storm-2697 · The Gentlemen Group
RansomwareFinancial

Thegentlemen is a ransomware group with a financial motive.

42TTPs
1exploited
54malware
AdvancedProfile →
Nightspire
aka nightspire Team
RansomwareFinancial

Nightspire is a ransomware group with a financial motive.

38TTPs
–No CVE data
7malware
IntermediateProfile →
Funksec
aka funksec Team
RansomwareFinancial

Funksec is a ransomware group with a financial motive.

23TTPs
–No CVE data
6malware
LowProfile →
MalteiroBrazil
CybercrimeFinancial

Malteiro is a Brazil-attributed cybercrime syndicate with a financial motive.

19TTPs
1exploited
1malware
ModerateProfile →
Hive
aka hive Team
RansomwareFinancial

Hive is a ransomware group with a financial motive.

6TTPs
6exploited
21malware
AdvancedProfile →
RevengeHotels
aka TA558
CybercrimeFinancial

RevengeHotels is a cybercrime syndicate with a financial motive.

4TTPs
–No CVE data
23malware
AdvancedProfile →
StormouS-X
aka Stormous · stormous Team · STMX +1
RansomwareFinancial

StormouS-X is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
InnovatorProfile →
Snatch
aka snatch Team · Team Truniger
RansomwareFinancial

Snatch is a ransomware group with a financial motive.

0TTPs
–No CVE data
6malware
AdvancedProfile →
Avaddon
aka avaddon Team · Riddle Spider
RansomwareFinancial

Avaddon is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Maze
aka ChaCha Ransomware · TA2101 · Maze Team +2
RansomwareFinancial

Maze is a ransomware group with a financial motive.

0TTPs
–No CVE data
12malware
AdvancedProfile →
Arcus Media
RansomwareFinancial

Arcus Media is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
M3rx
RansomwareFinancial

M3rx is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.