Skip to content
Threat actors by targeted country

Threat Actors Targeting Moldova.

Brandefense tracks 16 threat actors known to target Moldova. The most documented are APT28, Sandworm and APT38. The sectors they target most are Finance, Government and Manufacturing.

16 of 16 published profiles shown

APT28Russia
aka Strontium · Group 74 · Fancy Bear +25
Nation-state APTIdeology

APT28 is a Russia-attributed nation-state APT group with an ideological motive.

228TTPs
48exploited
143malware
StrategicProfile →
SandwormRussia
aka Russia-linked APT · APT44 · Sandworm (APT44) +2
UnclassifiedIdeology

Sandworm is a Russia-attributed threat actor group with an ideological motive.

215TTPs
36exploited
98malware
AdvancedProfile →
APT38North Korea
aka NICKEL GLADSTONE · BeagleBoyz · Bluenoroff +6
Nation-state APTFinancial

APT38 is a North Korea-attributed nation-state APT group with a financial motive.

153TTPs
65exploited
139malware
AdvancedProfile →
UAC-0056Russia
aka Storm-0587 · TA471 · Lorec53 +12
Nation-state APTEspionage

UAC-0056 is a Russia-attributed nation-state APT group with an espionage motive.

87TTPs
15exploited
16malware
AdvancedProfile →
InceptionRussia
aka Inception Framework · Cloud Atlas · Oxygen +7
Nation-state APTEspionage

Inception is a Russia-attributed nation-state APT group with an espionage motive.

91TTPs
7exploited
36malware
AdvancedProfile →
Cobalt GroupRussia
aka GOLD KINGSWOOD · Cobalt Gang · Cobalt Spider +4
CybercrimeFinancial

Cobalt Group is a Russia-attributed cybercrime syndicate with a financial motive.

69TTPs
17exploited
78malware
ModerateProfile →
Sea TurtleTürkiye
aka Teal Kurma · Cosmic Wolf · SILICON +2
Nation-state APTEspionage

Sea Turtle is a Türkiye-attributed nation-state APT group with an espionage motive.

62TTPs
6exploited
8malware
AdvancedProfile →
Winter VivernRussia
aka UAC-0114 · TA473 · TAG-70 +1
Nation-state APTEspionage

Winter Vivern is a Russia-attributed nation-state APT group with an espionage motive.

46TTPs
6exploited
7malware
AdvancedProfile →
SilenceRussia
aka Whisper Spider · G0091 · Contract Crew +3
CybercrimeFinancial

Silence is a Russia-attributed cybercrime syndicate with a financial motive.

36TTPs
8exploited
27malware
ModerateProfile →
Beast RansomwareRussia
aka Monster Ransomware
CybercrimeFinancial

Beast Ransomware is a Russia-attributed cybercrime syndicate with a financial motive.

34TTPs
–No CVE data
11malware
IntermediateProfile →
APT73
aka Eraleign (apt73) · Bashe · Eraleig Ransomware
RansomwareFinancial

APT73 is a ransomware group with a financial motive.

31TTPs
–No CVE data
22malware
IntermediateProfile →
NovaRussia
aka nova Team · Ransomware Operators · Nova affiliate program management
RansomwareFinancial

Nova is a Russia-attributed ransomware group with a financial motive.

25TTPs
–No CVE data
21malware
AdvancedProfile →
KILLNET
UnclassifiedIdeology

KILLNET is a threat actor group with an ideological motive.

4TTPs
–No CVE data
2malware
IntermediateProfile →
CiphBit
RansomwareFinancial

CiphBit is a ransomware group with a financial motive.

0TTPs
–No CVE data
2malware
LowProfile →
XDSpy
UnclassifiedIdeology

XDSpy is a threat actor group with an ideological motive. It targets the Government sector in 5 countries, including Russia and Ukraine.

0TTPs
–No CVE data
14malware
AdvancedProfile →
Void Balaur
aka Rockethack
CybercrimeFinancial

Void Balaur is a cybercrime syndicate with a financial motive. It targets organisations in 33 countries, including the United States and the United Kingdom.

0TTPs
–No CVE data
3malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.