Threat Actors Targeting Russia.

Azraelzer0d4y is a threat actor group with an ideological motive.

Claudexxx is a threat actor group with an ideological motive. It targets organisations in 25 countries, including the United States and the United Kingdom.

Root Phantom is a threat actor group with an ideological motive. It targets organisations in 32 countries, including the United States and the United Kingdom.

Moafee is a China-attributed cybercrime syndicate with an espionage motive.

Roaming Tiger is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 7 countries, including Russia and Ukraine.

M4ul1337 is a threat actor group with an ideological motive. It targets organisations in 13 countries, including the United Kingdom and India.

Hacking Cat is an Ukraine-attributed threat actor group with an ideological motive. It targets the Government, and Energy and Utilities sectors in Russia and Ukraine.

UAC-0277 is a Russia-attributed cybercrime syndicate with a financial motive. It targets the Retail and Consumer, and Business Services sectors in Russia and Ukraine.

CYKOMNEPAL is a threat actor group with an ideological motive.

MatxCysec is a threat actor group with an ideological motive. It targets organisations in 13 countries, including the United Kingdom and India.

Hotejka is a Russia-attributed cybercrime syndicate with a financial motive. It targets organisations in Russia. It uses 5 MITRE ATT&CK techniques.

Threeam is a ransomware group with a financial motive.

Bytez7 is a threat actor group with an ideological motive.

YoroTrooper is a Kazakhstan-attributed threat actor group with an ideological motive.

RevengeHotels is a cybercrime syndicate with a financial motive.

Nitro, Covert Grove is a China-attributed nation-state APT group with an espionage motive.

Auditteam is a ransomware group with a financial motive. It targets 9 sectors, including Government and Technology, in 10 countries, including Canada and Italy.

Moelester is a threat actor group. It targets organisations in 7 countries, including France and Russia. It uses 4 MITRE ATT&CK techniques.

Mr.XycanKing is a nation-state APT group with an espionage motive.

ComicForm is a cybercrime syndicate with a financial motive.

GCMAN is a Russia-attributed cybercrime syndicate with a financial motive. It targets the Finance sector in Russia. It uses 3 MITRE ATT&CK techniques.

Belarusian Cyber Partisans is a Belarus-attributed threat actor group with an ideological motive. It targets organisations in Russia and Belarus.

Silent Crow is a threat actor group with an ideological motive. It targets organisations in Russia and Belarus. It uses 3 MITRE ATT&CK techniques.

Babuk2 is a ransomware group with a financial motive.