Skip to content
Threat actors by targeted country

Threat Actors Targeting Morocco.

Brandefense tracks 43 threat actors known to target Morocco. The most documented are APT35, Lockbit and Qilin. The sectors they target most are Government, Manufacturing and Technology.

16 of 16 published profiles shown

APT33Iran
aka HOLMIUM · Elfin · Peach Sandstorm +4
Nation-state APTEspionage

APT33 is an Iran-attributed nation-state APT group with an espionage motive.

91TTPs
17exploited
50malware
AdvancedProfile →
Aquatic PandaChina
aka Bronze University · G0143
Nation-state APTEspionage

Aquatic Panda is a China-attributed nation-state APT group with an espionage motive.

80TTPs
19exploited
29malware
AdvancedProfile →
InceptionRussia
aka Inception Framework · Cloud Atlas · Oxygen +7
Nation-state APTEspionage

Inception is a Russia-attributed nation-state APT group with an espionage motive.

91TTPs
7exploited
36malware
AdvancedProfile →
StrongPityTürkiye
aka Promethium · APT-C-41 · Magenta Dust +1
Nation-state APTEspionage

StrongPity is a Türkiye-attributed nation-state APT group with an espionage motive.

58TTPs
2exploited
10malware
AdvancedProfile →
WIRTE
aka G0090 · White Dev 21
Nation-state APTEspionage

WIRTE is a nation-state APT group with an espionage motive. It targets 9 sectors, including Government and Technology, in 13 countries, including Türkiye and Israel.

51TTPs
1exploited
14malware
AdvancedProfile →
HEXANEIran
aka Lyceum · Siamesekitten · Spirlin +5
Nation-state APTEspionage

HEXANE is an Iran-attributed nation-state APT group with an espionage motive.

49TTPs
–No CVE data
20malware
AdvancedProfile →
APT-C-23
aka Desert Falcon · TAG-63 · Grey Karkadann +15
Nation-state APTEspionage

APT-C-23 is a nation-state APT group with an espionage motive.

40TTPs
2exploited
21malware
AdvancedProfile →
Molerats
aka Operation Molerats · Gaza Cybergang
Nation-state APTEspionage

Molerats is a nation-state APT group with an espionage motive.

27TTPs
1exploited
25malware
AdvancedProfile →
Ajax Security TeamIran
aka Operation Woolen-Goldfish · AjaxTM · Rocket Kitten +4
Nation-state APTEspionage

Ajax Security Team is an Iran-attributed nation-state APT group with an espionage motive.

18TTPs
9exploited
10malware
AdvancedProfile →
Earth KrahangChina
Nation-state APTEspionage

Earth Krahang is a China-attributed nation-state APT group with an espionage motive.

4TTPs
2exploited
10malware
AdvancedProfile →
Wolves of Turan
Nation-state APTEspionage

Wolves of Turan is a nation-state APT group with an espionage motive. It targets organisations in 3 countries, including France and Morocco.

5TTPs
–No CVE data
0malware
IntermediateProfile →
TheGarudaEye
Nation-state APTEspionage

TheGarudaEye is a nation-state APT group with an espionage motive.

4TTPs
–No CVE data
0malware
IntermediateProfile →
TeamSpy CrewRussia
aka SIG39 · Iron Lyric · Team Bear +1
Nation-state APTEspionage

TeamSpy Crew is a Russia-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
2malware
Not ratedProfile →
SNOWGLOBEFrance
aka Animal Farm · ATK8 · SIG20
Nation-state APTEspionage

SNOWGLOBE is a France-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
8malware
Not ratedProfile →
Careto, The MaskSpain
aka Careto · The Mask · Mask +1
Nation-state APTEspionage

Careto, The Mask is a Spain-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
COBALT JUNO
aka APT-C-38 (QiAnXin) · SABER LION · TG-2884 (SCWX CTU) +2
Nation-state APTEspionage

COBALT JUNO is a nation-state APT group with an espionage motive. It targets the Media and Entertainment sector in 7 countries, including Egypt and Iran.

0TTPs
–No CVE data
2malware
Not ratedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.