Skip to content
Threat actors by targeted country

Threat Actors Targeting Spain.

Brandefense tracks 201 threat actors known to target Spain. The most documented are APT28, Sandworm and APT38. The sectors they target most are Technology, Manufacturing and Finance.

201 of 201 published profiles shown

ScamClubChina
UnclassifiedUnknown

ScamClub is a China-attributed threat actor group. It targets organisations in 7 countries, including the United States and the United Kingdom.

0TTPs
–No CVE data
2malware
Not ratedProfile →
Valencialeaks
aka Valencia
RansomwareUnknown

Valencialeaks is a ransomware group. It targets the Finance and Business Services sectors in 4 countries, including India and Spain.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Bitpaymer
aka IEncrypt · FriedEx
RansomwareFinancial

Bitpaymer is a ransomware group with a financial motive. It targets organisations in 6 countries, including the United States and France.

0TTPs
–No CVE data
1malware
IntermediateProfile →
Basicfit
UnclassifiedUnknown

Basicfit is a threat actor group. It targets organisations in France and Spain.

0TTPs
–No CVE data
0malware
Not ratedProfile →
IntelShadow
UnclassifiedUnknown

IntelShadow is a threat actor group. It targets the Government sector in Spain.

0TTPs
–No CVE data
0malware
Not ratedProfile →
DogmaT3ch
UnclassifiedUnknown

DogmaT3ch is a threat actor group. It targets organisations in Spain.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Cexleaked
UnclassifiedUnknown

Cexleaked is a threat actor group. It targets organisations in Spain.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Fuerzayhonor
UnclassifiedUnknown

Fuerzayhonor is a threat actor group. It targets organisations in Spain.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Spain
UnclassifiedUnknown

Spain is a threat actor group. It targets organisations in Spain.

0TTPs
–No CVE data
0malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.