Skip to content
Threat actors by targeted country

Threat Actors Targeting Peru.

Brandefense tracks 64 threat actors known to target Peru. The most documented are Lazarus Group, Sandworm and APT29. The sectors they target most are Technology, Manufacturing and Government.

24 of 40 published profiles shown

Lazarus GroupNorth Korea
aka Famous Chollima · Hidden Cobra · ZINC +13
Nation-state APTFinancial

Lazarus Group is a North Korea-attributed nation-state APT group with a financial motive.

217TTPs
39exploited
172malware
StrategicProfile →
APT38North Korea
aka NICKEL GLADSTONE · BeagleBoyz · Bluenoroff +6
Nation-state APTFinancial

APT38 is a North Korea-attributed nation-state APT group with a financial motive.

153TTPs
65exploited
139malware
AdvancedProfile →
AKIRA
aka Megazord · Akira Team · GOLD SAHARA +1
RansomwareFinancial

AKIRA is a ransomware group with a financial motive.

137TTPs
54exploited
118malware
AdvancedProfile →
Lockbit
aka LockBit3.0 · LockBit2.0 · LockBit Ransomware operatörleri +5
RansomwareFinancial

Lockbit is a ransomware group with a financial motive.

133TTPs
32exploited
115malware
AdvancedProfile →
QilinRussia
aka Qilin Team · Water Galura · Qilin Ransomware +2
RansomwareFinancial

Qilin is a Russia-attributed ransomware group with a financial motive.

127TTPs
18exploited
139malware
AdvancedProfile →
RansomHub
aka RansomHub Team · RansomHub Ransomware · Water Bakunawa
RansomwareFinancial

RansomHub is a ransomware group with a financial motive.

111TTPs
30exploited
72malware
AdvancedProfile →
DragonForceMalaysia
aka DragonForce Team · DFRC
RansomwareFinancial

DragonForce is a Malaysia-attributed ransomware group with a financial motive.

109TTPs
24exploited
71malware
AdvancedProfile →
INC Ransom
aka GOLD IONIC · INC Ransom Team
RansomwareFinancial

INC Ransom is a ransomware group with a financial motive.

69TTPs
36exploited
70malware
ModerateProfile →
Medusa
aka Medusa Team
RansomwareFinancial

Medusa is a ransomware group with a financial motive.

80TTPs
23exploited
28malware
AdvancedProfile →
Safepay
aka SafePay Team
RansomwareFinancial

Safepay is a ransomware group with a financial motive.

75TTPs
18exploited
30malware
ModerateProfile →
BlackByte
aka blackbyte Team · Hecamede
RansomwareFinancial

BlackByte is a ransomware group with a financial motive.

84TTPs
7exploited
15malware
AdvancedProfile →
Interlock
aka Nefarious Mantis
RansomwareFinancial

Interlock is a ransomware group with a financial motive.

81TTPs
2exploited
21malware
ModerateProfile →
Storm-0501
CybercrimeFinancial

Storm-0501 is a cybercrime syndicate with a financial motive.

62TTPs
9exploited
30malware
AdvancedProfile →
Rhysida
aka Rhysida Team
RansomwareFinancial

Rhysida is a ransomware group with a financial motive.

52TTPs
–No CVE data
38malware
ModerateProfile →
Thegentlemen
aka Storm-2697 · The Gentlemen Group
RansomwareFinancial

Thegentlemen is a ransomware group with a financial motive.

42TTPs
1exploited
54malware
AdvancedProfile →
Nightspire
aka nightspire Team
RansomwareFinancial

Nightspire is a ransomware group with a financial motive.

38TTPs
–No CVE data
7malware
IntermediateProfile →
Blackmatter
RansomwareFinancial

Blackmatter is a ransomware group with a financial motive.

37TTPs
–No CVE data
11malware
AdvancedProfile →
8BASE
aka 8BASE Team
RansomwareFinancial

8BASE is a ransomware group with a financial motive.

34TTPs
–No CVE data
25malware
ModerateProfile →
RansomExx
aka Ransom X · Defray777 · Defray 2018 +5
RansomwareFinancial

RansomExx is a ransomware group with a financial motive.

26TTPs
8exploited
21malware
AdvancedProfile →
APT73
aka Eraleign (apt73) · Bashe · Eraleig Ransomware
RansomwareFinancial

APT73 is a ransomware group with a financial motive.

31TTPs
–No CVE data
22malware
IntermediateProfile →
NovaRussia
aka nova Team · Ransomware Operators · Nova affiliate program management
RansomwareFinancial

Nova is a Russia-attributed ransomware group with a financial motive.

25TTPs
–No CVE data
21malware
AdvancedProfile →
Lockbit5
aka lockbit5 Team · LockBit Black · LockBit 4.0
RansomwareFinancial

Lockbit5 is a ransomware group with a financial motive.

22TTPs
–No CVE data
20malware
AdvancedProfile →
RansomHouse
aka ransomhouse Team
RansomwareFinancial

RansomHouse is a ransomware group with a financial motive.

20TTPs
–No CVE data
21malware
ModerateProfile →
Direwolf
RansomwareFinancial

Direwolf is a ransomware group with a financial motive.

20TTPs
–No CVE data
12malware
IntermediateProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.