Skip to content
Threat actors by targeted country

Threat Actors Targeting Vietnam.

Brandefense tracks 143 threat actors known to target Vietnam. The most documented are APT28, Kimsuky and Lazarus Group. The sectors they target most are Government, Manufacturing, and Education and Research.

120 of 143 published profiles shown

ActorTypeOriginMotivationSophisticationExploited CVEsTop malware
Hulky0 aliasesUnclassifiedUnattributedUnknownNot rated––
Dark_Alpha0 aliasesUnclassifiedUnattributedUnknownNot rated––
GhostRedirector0 aliasesCybercrimeChinaFinancialAdvanced––
Abyss3 aliasesRansomwareUnattributedFinancialModerate–Abyss
UNK_ColtCentury3 aliasesUnclassifiedChinaIdeologyAdvanced–Cobalt Strike
0xulnar0 aliasesUnclassifiedUnattributedUnknownNot rated––
Babuk21 aliasRansomwareUnattributedFinancialAdvanced––
Worok0 aliasesNation-state APTChinaEspionageNot rated––
IcePeony0 aliasesUnclassifiedChinaIdeologyAdvanced––
Giorggios0 aliasesUnclassifiedUnattributedUnknownNot rated––
Max9870 aliasesUnclassifiedUnattributedUnknownNot rated––
ZanzxyyXploit0 aliasesUnclassifiedUnattributedIdeologyIntermediate––
StormouS-X4 aliasesRansomwareUnattributedFinancialInnovator–Stormous
Coinbasecartel2 aliasesRansomwareUnattributedFinancialAdvanced––
Radar1 aliasRansomwareUnattributedFinancialAdvanced––
Knight0 aliasesRansomwareUnattributedUnknownNot rated–Knight
Dark Pink1 aliasNation-state APTUnattributedEspionageAdvanced–Ctealer
Cycldek1 aliasUnclassifiedUnattributedIdeologyAdvanced––
Sdjlkfjekje3453450 aliasesUnclassifiedUnattributedUnknownNot rated––
Xneonn83860 aliasesUnclassifiedUnattributedUnknownNot rated––
Kill Security2 aliasesRansomwareUnattributedFinancialIntermediate––
Crypto240 aliasesRansomwareUnattributedEspionageIntermediate–Crypto24
GOLD MANSARD0 aliasesCybercrimeUnattributedFinancialNot rated––
Raznatovic0 aliasesRansomwareUnattributedFinancialAdvanced–Raznatovic
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.