Skip to content
Nation-state APTEspionageIntermediate sophistication

TheGarudaEye

TheGarudaEye is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Government, and Hospitality and Tourism sectors in 6 countries, including France and Saudi Arabia. It uses 4 MITRE ATT&CK techniques.

Techniques
4
Exploited CVEs
No CVE data
Record updated

Who They Target.

How They Operate · MITRE ATT&CK.

5 techniques across 2 of 14 tactics

Reconnaissance·

Resource Development·

Initial Access·

Execution·

Persistence·

Privilege Escalation·

Defense Evasion1

T1498
Network Denial of Service

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact4

T1498
Network Denial of Service
T1498.001
Network Denial of Service: Direct Network Flood
T1499
Endpoint Denial of Service
T1499.001
Endpoint Denial of Service: OS Exhaustion Flood

About TheGarudaEye.

Threat actor observed conducting Distributed Denial of Service (DDoS) activity against government entities.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.