Skip to content
Threat actors by targeted country

Threat Actors Targeting Croatia.

Brandefense tracks 35 threat actors known to target Croatia. The most documented are Kimsuky, APT28 and APT38. The sectors they target most are Manufacturing, Government, and Education and Research.

21 of 21 published profiles shown

APT38North Korea
aka NICKEL GLADSTONE · BeagleBoyz · Bluenoroff +6
Nation-state APTFinancial

APT38 is a North Korea-attributed nation-state APT group with a financial motive.

153TTPs
65exploited
139malware
AdvancedProfile →
AKIRA
aka Megazord · Akira Team · GOLD SAHARA +1
RansomwareFinancial

AKIRA is a ransomware group with a financial motive.

137TTPs
54exploited
118malware
AdvancedProfile →
QilinRussia
aka Qilin Team · Water Galura · Qilin Ransomware +2
RansomwareFinancial

Qilin is a Russia-attributed ransomware group with a financial motive.

127TTPs
18exploited
139malware
AdvancedProfile →
Clop
aka Lace Tempest
RansomwareFinancial

Clop is a ransomware group with a financial motive.

91TTPs
31exploited
95malware
AdvancedProfile →
INC Ransom
aka GOLD IONIC · INC Ransom Team
RansomwareFinancial

INC Ransom is a ransomware group with a financial motive.

69TTPs
36exploited
70malware
ModerateProfile →
SilenceRussia
aka Whisper Spider · G0091 · Contract Crew +3
CybercrimeFinancial

Silence is a Russia-attributed cybercrime syndicate with a financial motive.

36TTPs
8exploited
27malware
ModerateProfile →
Thegentlemen
aka Storm-2697 · The Gentlemen Group
RansomwareFinancial

Thegentlemen is a ransomware group with a financial motive.

42TTPs
1exploited
54malware
AdvancedProfile →
Nightspire
aka nightspire Team
RansomwareFinancial

Nightspire is a ransomware group with a financial motive.

38TTPs
–No CVE data
7malware
IntermediateProfile →
Gunra
RansomwareFinancial

Gunra is a ransomware group with a financial motive. It targets 15 sectors, including Government and Technology, in 30 countries, including the United States and France.

37TTPs
–No CVE data
8malware
ExpertProfile →
8BASE
aka 8BASE Team
RansomwareFinancial

8BASE is a ransomware group with a financial motive.

34TTPs
–No CVE data
25malware
ModerateProfile →
APT73
aka Eraleign (apt73) · Bashe · Eraleig Ransomware
RansomwareFinancial

APT73 is a ransomware group with a financial motive.

31TTPs
–No CVE data
22malware
IntermediateProfile →
WarlockChina
aka Longlegs
RansomwareFinancial

Warlock is a China-attributed ransomware group with a financial motive.

29TTPs
2exploited
28malware
AdvancedProfile →
Deadlock
RansomwareFinancial

Deadlock is a ransomware group with a financial motive.

4TTPs
–No CVE data
16malware
AdvancedProfile →
DataLeak
RansomwareFinancial

DataLeak is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
Not ratedProfile →
StormouS-X
aka Stormous · stormous Team · STMX +1
RansomwareFinancial

StormouS-X is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
InnovatorProfile →
Quantum
aka QuantumLocker · DagonLocker · Mount-Locker +5
RansomwareFinancial

Quantum is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
AdvancedProfile →
Radar
aka Radar Ransomware
RansomwareFinancial

Radar is a ransomware group with a financial motive.

1TTPs
–No CVE data
2malware
AdvancedProfile →
DarkVault
RansomwareFinancial

DarkVault is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Blacklock
aka El Dorado
RansomwareFinancial

Blacklock is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
AdvancedProfile →
Blackout
RansomwareFinancial

Blackout is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Corkow, MetelRussia
aka Corkow · Metel
CybercrimeFinancial

Corkow, Metel is a Russia-attributed cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.