Skip to content
Threat actors by targeted country

Threat Actors Targeting Lebanon.

Brandefense tracks 50 threat actors known to target Lebanon. The most documented are APT29, APT35 and OilRig. The sectors they target most are Government, Finance, and Education and Research.

15 of 15 published profiles shown

ActorTypeOriginMotivationSophisticationExploited CVEsTop malware
Lockbit8 aliasesRansomwareUnattributedFinancialAdvanced32–
Qilin5 aliasesRansomwareRussiaFinancialAdvanced18–
RansomHub3 aliasesRansomwareUnattributedFinancialAdvanced30–
DragonForce2 aliasesRansomwareMalaysiaFinancialAdvanced24–
Evilnum4 aliasesCybercrimeUnattributedFinancialModerate––
Thegentlemen2 aliasesRansomwareUnattributedFinancialAdvanced1–
Beast Ransomware1 aliasCybercrimeRussiaFinancialIntermediate––
Helldown0 aliasesRansomwareUnattributedFinancialAdvanced2–
Funksec1 aliasRansomwareUnattributedFinancialLow––
Devman1 aliasRansomwareUnattributedFinancialNot rated––
Deadlock0 aliasesRansomwareUnattributedFinancialAdvanced––
RevengeHotels1 aliasCybercrimeUnattributedFinancialAdvanced––
Babuk21 aliasRansomwareUnattributedFinancialAdvanced––
StormouS-X4 aliasesRansomwareUnattributedFinancialInnovator––
DeathStalker1 aliasCybercrimeUnattributedFinancialAdvanced––
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.