Skip to content
Threat actors by targeted country

Threat Actors Targeting Georgia.

Brandefense tracks 42 threat actors known to target Georgia. The most documented are APT28, Sandworm and APT29. The sectors they target most are Government, Manufacturing and Technology.

17 of 17 published profiles shown

AKIRA
aka Megazord · Akira Team · GOLD SAHARA +1
RansomwareFinancial

AKIRA is a ransomware group with a financial motive.

137TTPs
54exploited
118malware
AdvancedProfile →
DragonForceMalaysia
aka DragonForce Team · DFRC
RansomwareFinancial

DragonForce is a Malaysia-attributed ransomware group with a financial motive.

109TTPs
24exploited
71malware
AdvancedProfile →
Clop
aka Lace Tempest
RansomwareFinancial

Clop is a ransomware group with a financial motive.

91TTPs
31exploited
95malware
AdvancedProfile →
BianLian
aka BianLian Team
RansomwareFinancial

BianLian is a ransomware group with a financial motive.

99TTPs
13exploited
37malware
AdvancedProfile →
INC Ransom
aka GOLD IONIC · INC Ransom Team
RansomwareFinancial

INC Ransom is a ransomware group with a financial motive.

69TTPs
36exploited
70malware
ModerateProfile →
Cobalt GroupRussia
aka GOLD KINGSWOOD · Cobalt Gang · Cobalt Spider +4
CybercrimeFinancial

Cobalt Group is a Russia-attributed cybercrime syndicate with a financial motive.

69TTPs
17exploited
78malware
ModerateProfile →
Rhysida
aka Rhysida Team
RansomwareFinancial

Rhysida is a ransomware group with a financial motive.

52TTPs
–No CVE data
38malware
ModerateProfile →
SilenceRussia
aka Whisper Spider · G0091 · Contract Crew +3
CybercrimeFinancial

Silence is a Russia-attributed cybercrime syndicate with a financial motive.

36TTPs
8exploited
27malware
ModerateProfile →
Thegentlemen
aka Storm-2697 · The Gentlemen Group
RansomwareFinancial

Thegentlemen is a ransomware group with a financial motive.

42TTPs
1exploited
54malware
AdvancedProfile →
Nightspire
aka nightspire Team
RansomwareFinancial

Nightspire is a ransomware group with a financial motive.

38TTPs
–No CVE data
7malware
IntermediateProfile →
Krybit
aka krybit Team
RansomwareFinancial

Krybit is a ransomware group with a financial motive. It targets 14 sectors, including Government and Technology, in 35 countries, including India and France.

24TTPs
–No CVE data
8malware
AdvancedProfile →
Embargo
RansomwareFinancial

Embargo is a ransomware group with a financial motive.

15TTPs
–No CVE data
3malware
AdvancedProfile →
Sarcoma
aka Sarcoma Ransomware Group
RansomwareFinancial

Sarcoma is a ransomware group with a financial motive.

3TTPs
–No CVE data
1malware
ModerateProfile →
Kill Security
aka Killsec · killsec Team
RansomwareFinancial

Kill Security is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
IntermediateProfile →
Space Bears
aka spacebears Team · Space Bear
RansomwareFinancial

Space Bears is a ransomware group with a financial motive.

0TTPs
–No CVE data
3malware
ModerateProfile →
MedUSlocker
aka Medusalocker
RansomwareFinancial

MedUSlocker is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Void Balaur
aka Rockethack
CybercrimeFinancial

Void Balaur is a cybercrime syndicate with a financial motive. It targets organisations in 33 countries, including the United States and the United Kingdom.

0TTPs
–No CVE data
3malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.