Skip to content
Threat actors by targeted country

Threat Actors Targeting Indonesia.

Brandefense tracks 228 threat actors known to target Indonesia. The most documented are APT28, Lazarus Group and GhostEmperor. The sectors they target most are Government, Manufacturing and Technology.

168 of 228 published profiles shown

ActorTypeOriginMotivationSophisticationExploited CVEsTop malware
Massive Hq0 aliasesUnclassifiedUnattributedIdeologyMinimal––
Sudo-70 aliasesUnclassifiedUnattributedIdeologyMinimal––
B4d0kAhay0 aliasesUnclassifiedUnattributedUnknownNot rated––
Moneyistime0 aliasesUnclassifiedUnattributedUnknownNot rated––
Mrsawit0 aliasesUnclassifiedUnattributedUnknownNot rated––
DeepCore Network0 aliasesUnclassifiedUnattributedUnknownNot rated––
XyraExee0 aliasesUnclassifiedUnattributedUnknownNot rated––
DIVACCX 7070 aliasesUnclassifiedUnattributedUnknownNot rated––
BhayangkaraID0 aliasesUnclassifiedUnattributedUnknownNot rated––
SANG GABUTNYA SI ALI0 aliasesUnclassifiedUnattributedUnknownNot rated––
NightHex4040 aliasesUnclassifiedUnattributedUnknownNot rated––
ZanzxyyXploit0 aliasesUnclassifiedUnattributedIdeologyIntermediate––
StormouS-X4 aliasesRansomwareUnattributedFinancialInnovator–Stormous
Coinbasecartel2 aliasesRansomwareUnattributedFinancialAdvanced–Coinbasecartel
Matx13371 aliasUnclassifiedUnattributedIdeologyMinimal––
Ph.Bl4ke0 aliasesUnclassifiedUnattributedIdeologyNot rated––
Tuco460 aliasesUnclassifiedUnattributedIdeologyNot rated––
NFU Pay0 aliasesCybercrimeUnattributedFinancialIntermediate–Ghost Tap
Anonpis0 aliasesUnclassifiedUnattributedUnknownNot rated––
SadClown0 aliasesUnclassifiedUnattributedUnknownNot rated––
Bambi0 aliasesUnclassifiedUnattributedUnknownNot rated––
Kim1000P0 aliasesUnclassifiedUnattributedUnknownNot rated––
Zayn Ops880 aliasesUnclassifiedUnattributedUnknownNot rated––
Sanguine0 aliasesUnclassifiedUnattributedUnknownNot rated––
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.