Skip to content
brandefense.io
Request A Demo
Threat actors by targeted country

Threat Actors Targeting Mexico.

Brandefense tracks 168 threat actors known to target Mexico. The most documented are APT28, Lazarus Group and Sandworm. The sectors they target most are Manufacturing, Technology and Finance.
Top target sectorsManufacturingTechnologyFinanceRansomware victims in Mexico →
MotivationEspionageFinancialIdeology

120 of 168 published profiles shown

CardsTable
RevengeHotels
aka TA558
CybercrimeFinancial

RevengeHotels is a cybercrime syndicate with a financial motive.

4TTPs
–No CVE data
23malware
AdvancedProfile →
Henrymartin
UnclassifiedUnknown

Henrymartin is a threat actor group. It targets organisations in 3 countries, including Mexico and Peru. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Skull1172
UnclassifiedUnknown

Skull1172 is a threat actor group. It targets organisations in 3 countries, including Spain and Mexico. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Black0ut_Exi
UnclassifiedUnknown

Black0ut_Exi is a threat actor group. It targets organisations in Mexico and Argentina. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Sarcoma
aka Sarcoma Ransomware Group
RansomwareFinancial

Sarcoma is a ransomware group with a financial motive.

3TTPs
–No CVE data
1malware
ModerateProfile →
S0BER
UnclassifiedUnknown

S0BER is a threat actor group. It targets organisations in 5 countries, including Mexico and the United Arab Emirates. It uses 3 MITRE ATT&CK techniques.

3TTPs
–No CVE data
0malware
Not ratedProfile →
l1ghtSoulHem
UnclassifiedUnknown

l1ghtSoulHem is a threat actor group. It targets organisations in Mexico and Peru. It uses 3 MITRE ATT&CK techniques.

3TTPs
–No CVE data
0malware
Not ratedProfile →
Lvn4t1k0
UnclassifiedUnknown

Lvn4t1k0 is a threat actor group. It targets organisations in Mexico. It uses 3 MITRE ATT&CK techniques.

3TTPs
–No CVE data
0malware
Not ratedProfile →
Babuk2
aka Satanlock
RansomwareFinancial

Babuk2 is a ransomware group with a financial motive.

2TTPs
–No CVE data
1malware
AdvancedProfile →
Nemoris_Hacking
UnclassifiedUnknown

Nemoris_Hacking is a threat actor group. It targets organisations in 3 countries, including the United States and Mexico. It uses 2 MITRE ATT&CK techniques.

2TTPs
–No CVE data
0malware
Not ratedProfile →
D3spair157
UnclassifiedUnknown

D3spair157 is a threat actor group. It targets organisations in Brazil and Mexico. It uses 2 MITRE ATT&CK techniques.

2TTPs
–No CVE data
0malware
Not ratedProfile →
Alecc157
UnclassifiedUnknown

Alecc157 is a threat actor group. It targets organisations in Mexico and the Dominican Republic. It uses 2 MITRE ATT&CK techniques.

2TTPs
–No CVE data
0malware
Not ratedProfile →
Hermes_Olymp
UnclassifiedUnknown

Hermes_Olymp is a threat actor group. It targets organisations in Mexico. It uses 2 MITRE ATT&CK techniques.

2TTPs
–No CVE data
0malware
Not ratedProfile →
MagoSpeak
UnclassifiedUnknown

MagoSpeak is a threat actor group. It targets organisations in Mexico. It uses 2 MITRE ATT&CK techniques.

2TTPs
–No CVE data
0malware
Not ratedProfile →
Rose11
UnclassifiedUnknown

Rose11 is a threat actor group. It targets organisations in Mexico. It uses 2 MITRE ATT&CK techniques.

2TTPs
–No CVE data
0malware
Not ratedProfile →
ZanzxyyXploit
UnclassifiedIdeology

ZanzxyyXploit is a threat actor group with an ideological motive.

1TTPs
–No CVE data
0malware
IntermediateProfile →
Coinbasecartel
aka coinbasecartel Team · Shinysp1d3r
RansomwareFinancial

Coinbasecartel is a ransomware group with a financial motive.

1TTPs
–No CVE data
1malware
AdvancedProfile →
Red Ransomware
aka Red CryptoApp
RansomwareFinancial

Red Ransomware is a ransomware group with a financial motive.

0TTPs
1exploited
4malware
ModerateProfile →
TA2725
CybercrimeFinancial

TA2725 is a cybercrime syndicate with a financial motive. It targets the Finance sector in 3 countries, including Brazil and Spain. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
5malware
IntermediateProfile →
Sativa
UnclassifiedUnknown

Sativa is a threat actor group. It targets organisations in Mexico. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
0malware
Not ratedProfile →
Alz_157s
UnclassifiedUnknown

Alz_157s is a threat actor group. It targets organisations in Mexico. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
0malware
Not ratedProfile →
⭐ RED✘ ⭐
UnclassifiedUnknown

⭐ RED✘ ⭐ is a threat actor group. It targets organisations in the United States and Mexico. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
0malware
Not ratedProfile →
Z3usOlymp
UnclassifiedUnknown

Z3usOlymp is a threat actor group. It targets organisations in Mexico. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
0malware
Not ratedProfile →
Vansel
UnclassifiedUnknown

Vansel is a threat actor group. It targets organisations in Mexico. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
0malware
Not ratedProfile →
Load 24 more
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.