Skip to content
CybercrimeFinancialIntermediate sophistication

Thor

Thor is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 9 MITRE ATT&CK techniques.

Techniques
9
Exploited CVEs
No CVE data
Record updated

About Thor.

A group known for deploying LockBit and Babuk ransomware, primarily targeting Russian entities for financial gain.

Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.