Skip to content
Threat actors by targeted country

Threat Actors Targeting Pakistan.

Brandefense tracks 113 threat actors known to target Pakistan. The most documented are APT28, Lazarus Group and Sandworm. The sectors they target most are Government, Education and Research, and Manufacturing.

96 of 113 published profiles shown

ActorTypeOriginMotivationSophisticationExploited CVEsTop malware
UNC70170 aliasesNation-state APTUnattributedEspionageAdvanced––
Earth Krahang0 aliasesNation-state APTChinaEspionageAdvanced2–
Sorb0 aliasesCybercrimeUnattributedFinancialIntermediate––
GORZ_ROSTAM0 aliasesUnclassifiedUnattributedUnknownNot rated––
RevengeHotels1 aliasCybercrimeUnattributedFinancialAdvanced––
Flipperone0 aliasesUnclassifiedUnattributedUnknownNot rated––
Sarcoma1 aliasRansomwareUnattributedFinancialModerate––
Worldleaks1 aliasRansomwareUnattributedFinancialIntermediate––
Babuk21 aliasRansomwareUnattributedFinancialAdvanced––
APT-C-500 aliasesUnclassifiedUnattributedUnknownNot rated––
J1nx50 aliasesUnclassifiedUnattributedUnknownNot rated––
ZanzxyyXploit0 aliasesUnclassifiedUnattributedIdeologyIntermediate––
Kazu0 aliasesRansomwareUnattributedFinancialNot rated–Kazu
GoldenJackal0 aliasesNation-state APTUnattributedEspionageAdvanced––
ModernStealer0 aliasesUnclassifiedUnattributedUnknownNot rated––
Rothmansneck0 aliasesUnclassifiedUnattributedUnknownNot rated––
Cryp70n1c0d30 aliasesRansomwareUnattributedFinancialNot rated––
GOLD MANSARD0 aliasesCybercrimeUnattributedFinancialNot rated––
Fxmsp2 aliasesCybercrimeKazakhstanFinancialNot rated––
Raznatovic0 aliasesRansomwareUnattributedFinancialAdvanced––
Icefog, Dagger Panda4 aliasesNation-state APTChinaEspionageNot rated––
Arcus Media0 aliasesRansomwareUnattributedFinancialNot rated–Arcus Media
Shadow Network0 aliasesNation-state APTChinaEspionageNot rated––
CoralRaider0 aliasesCybercrimeVietnamFinancialModerate––
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.