Skip to content
Threat actors by targeted country

Threat Actors Targeting Luxembourg.

Brandefense tracks 27 threat actors known to target Luxembourg. The most documented are Kimsuky, APT28 and Sandworm. The sectors they target most are Manufacturing, Finance, and Education and Research.

18 of 18 published profiles shown

APT38North Korea
aka NICKEL GLADSTONE · BeagleBoyz · Bluenoroff +6
Nation-state APTFinancial

APT38 is a North Korea-attributed nation-state APT group with a financial motive.

153TTPs
65exploited
139malware
AdvancedProfile →
AKIRA
aka Megazord · Akira Team · GOLD SAHARA +1
RansomwareFinancial

AKIRA is a ransomware group with a financial motive.

137TTPs
54exploited
118malware
AdvancedProfile →
Lockbit
aka LockBit3.0 · LockBit2.0 · LockBit Ransomware operatörleri +5
RansomwareFinancial

Lockbit is a ransomware group with a financial motive.

133TTPs
32exploited
115malware
AdvancedProfile →
QilinRussia
aka Qilin Team · Water Galura · Qilin Ransomware +2
RansomwareFinancial

Qilin is a Russia-attributed ransomware group with a financial motive.

127TTPs
18exploited
139malware
AdvancedProfile →
DragonForceMalaysia
aka DragonForce Team · DFRC
RansomwareFinancial

DragonForce is a Malaysia-attributed ransomware group with a financial motive.

109TTPs
24exploited
71malware
AdvancedProfile →
Clop
aka Lace Tempest
RansomwareFinancial

Clop is a ransomware group with a financial motive.

91TTPs
31exploited
95malware
AdvancedProfile →
UNC4736North Korea
aka Gleaming Pisces · UNC1720 · AppleJeus
Nation-state APTFinancial

UNC4736 is a North Korea-attributed nation-state APT group with a financial motive.

54TTPs
14exploited
27malware
AdvancedProfile →
ALPHV/BlackCat
aka Black Cat · ALPHV · Noberus +1
RansomwareFinancial

ALPHV/BlackCat is a ransomware group with a financial motive.

37TTPs
16exploited
48malware
AdvancedProfile →
TA569
aka DEV-0206 · GOLD PRELUDE · UNC1543
CybercrimeFinancial

TA569 is a cybercrime syndicate with a financial motive.

50TTPs
–No CVE data
39malware
ModerateProfile →
SilenceRussia
aka Whisper Spider · G0091 · Contract Crew +3
CybercrimeFinancial

Silence is a Russia-attributed cybercrime syndicate with a financial motive.

36TTPs
8exploited
27malware
ModerateProfile →
Lapsus$Brazil
aka DEV-0537 · Strawberry Tempest · Slippy Spider +1
RansomwareFinancial

Lapsus$ is a Brazil-attributed ransomware group with a financial motive.

39TTPs
1exploited
38malware
ModerateProfile →
Nightspire
aka nightspire Team
RansomwareFinancial

Nightspire is a ransomware group with a financial motive.

38TTPs
–No CVE data
7malware
IntermediateProfile →
PLAYRussia
aka Play Team
RansomwareFinancial

PLAY is a Russia-attributed ransomware group with a financial motive.

37TTPs
–No CVE data
34malware
AdvancedProfile →
BlackSuit
aka BlackSuit Team · BlackSuit Ransomware
RansomwareFinancial

BlackSuit is a ransomware group with a financial motive.

33TTPs
1exploited
30malware
AdvancedProfile →
8BASE
aka 8BASE Team
RansomwareFinancial

8BASE is a ransomware group with a financial motive.

34TTPs
–No CVE data
25malware
ModerateProfile →
NovaRussia
aka nova Team · Ransomware Operators · Nova affiliate program management
RansomwareFinancial

Nova is a Russia-attributed ransomware group with a financial motive.

25TTPs
–No CVE data
21malware
AdvancedProfile →
Metaencryptor
RansomwareFinancial

Metaencryptor is a ransomware group with a financial motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
GOLD MANSARD
CybercrimeFinancial

GOLD MANSARD is a cybercrime syndicate with a financial motive. It targets organisations in 51 countries, including the United States and the United Kingdom.

0TTPs
–No CVE data
11malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.