Skip to content
Threat actors by targeted country

Threat Actors Targeting New Zealand.

Brandefense tracks 71 threat actors known to target New Zealand. The most documented are Lazarus Group, Sandworm and APT29. The sectors they target most are Government, Manufacturing, and Education and Research.

24 of 40 published profiles shown

Lazarus GroupNorth Korea
aka Famous Chollima · Hidden Cobra · ZINC +13
Nation-state APTFinancial

Lazarus Group is a North Korea-attributed nation-state APT group with a financial motive.

217TTPs
39exploited
172malware
StrategicProfile →
AKIRA
aka Megazord · Akira Team · GOLD SAHARA +1
RansomwareFinancial

AKIRA is a ransomware group with a financial motive.

137TTPs
54exploited
118malware
AdvancedProfile →
Lockbit
aka LockBit3.0 · LockBit2.0 · LockBit Ransomware operatörleri +5
RansomwareFinancial

Lockbit is a ransomware group with a financial motive.

133TTPs
32exploited
115malware
AdvancedProfile →
BlackBasta
aka Black Basta Team
RansomwareFinancial

BlackBasta is a ransomware group with a financial motive.

98TTPs
65exploited
62malware
AdvancedProfile →
Wizard SpiderRussia
aka UNC1878 · TEMP.MixMaster · Grim Spider +12
CybercrimeFinancial

Wizard Spider is a Russia-attributed cybercrime syndicate with a financial motive.

83TTPs
68exploited
69malware
AdvancedProfile →
QilinRussia
aka Qilin Team · Water Galura · Qilin Ransomware +2
RansomwareFinancial

Qilin is a Russia-attributed ransomware group with a financial motive.

127TTPs
18exploited
139malware
AdvancedProfile →
RansomHub
aka RansomHub Team · RansomHub Ransomware · Water Bakunawa
RansomwareFinancial

RansomHub is a ransomware group with a financial motive.

111TTPs
30exploited
72malware
AdvancedProfile →
DragonForceMalaysia
aka DragonForce Team · DFRC
RansomwareFinancial

DragonForce is a Malaysia-attributed ransomware group with a financial motive.

109TTPs
24exploited
71malware
AdvancedProfile →
Storm-1811
CybercrimeFinancial

Storm-1811 is a cybercrime syndicate with a financial motive.

63TTPs
63exploited
18malware
IntermediateProfile →
Clop
aka Lace Tempest
RansomwareFinancial

Clop is a ransomware group with a financial motive.

91TTPs
31exploited
95malware
AdvancedProfile →
INC Ransom
aka GOLD IONIC · INC Ransom Team
RansomwareFinancial

INC Ransom is a ransomware group with a financial motive.

69TTPs
36exploited
70malware
ModerateProfile →
TA505
aka ATK103 · CHIMBORAZO · DEV-0950 +8
CybercrimeFinancial

TA505 is a cybercrime syndicate with a financial motive.

77TTPs
27exploited
27malware
ModerateProfile →
Medusa
aka Medusa Team
RansomwareFinancial

Medusa is a ransomware group with a financial motive.

80TTPs
23exploited
28malware
AdvancedProfile →
Safepay
aka SafePay Team
RansomwareFinancial

Safepay is a ransomware group with a financial motive.

75TTPs
18exploited
30malware
ModerateProfile →
BlackByte
aka blackbyte Team · Hecamede
RansomwareFinancial

BlackByte is a ransomware group with a financial motive.

84TTPs
7exploited
15malware
AdvancedProfile →
RevilRussia
aka Sodinokibi
RansomwareFinancial

Revil is a Russia-attributed ransomware group with a financial motive.

45TTPs
25exploited
16malware
AdvancedProfile →
UNC4736North Korea
aka Gleaming Pisces · UNC1720 · AppleJeus
Nation-state APTFinancial

UNC4736 is a North Korea-attributed nation-state APT group with a financial motive.

54TTPs
14exploited
27malware
AdvancedProfile →
ALPHV/BlackCat
aka Black Cat · ALPHV · Noberus +1
RansomwareFinancial

ALPHV/BlackCat is a ransomware group with a financial motive.

37TTPs
16exploited
48malware
AdvancedProfile →
SilenceRussia
aka Whisper Spider · G0091 · Contract Crew +3
CybercrimeFinancial

Silence is a Russia-attributed cybercrime syndicate with a financial motive.

36TTPs
8exploited
27malware
ModerateProfile →
8BASE
aka 8BASE Team
RansomwareFinancial

8BASE is a ransomware group with a financial motive.

34TTPs
–No CVE data
25malware
ModerateProfile →
Hunters
RansomwareFinancial

Hunters is a ransomware group with a financial motive.

22TTPs
–No CVE data
6malware
AdvancedProfile →
Chaos
aka Chaos RaaS
RansomwareFinancial

Chaos is a ransomware group with a financial motive.

17TTPs
1exploited
4malware
AdvancedProfile →
Anubis
aka Anubis Ransomware · BankBot · Maza-in
RansomwareFinancial

Anubis is a ransomware group with a financial motive.

10TTPs
–No CVE data
1malware
AdvancedProfile →
Settra
RansomwareFinancial

Settra is a ransomware group with a financial motive.

7TTPs
–No CVE data
2malware
AdvancedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.