Skip to content
Threat actors by type

Cybercrime Threat Actors.

Brandefense tracks 467 cybercrime syndicates. The most documented are Wizard Spider, TA505 and Storm-1811. The sectors they target most are Finance, Government and Manufacturing.

467 of 467 published profiles shown

Ilya Lichtenstein
CybercrimeFinancial

Ilya Lichtenstein is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
AdvancedProfile →
Devil
CybercrimeFinancial

Devil is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
N4ughtysecTU
CybercrimeFinancial

N4ughtysecTU is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
Zombie Spider
aka Peter Severa
CybercrimeFinancial

Zombie Spider is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
Gary James Harmon
CybercrimeFinancial

Gary James Harmon is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
OneAudience
CybercrimeFinancial

OneAudience is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
Sythe
CybercrimeFinancial

Sythe is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Telaviv
CybercrimeFinancial

Telaviv is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
1011
CybercrimeFinancial

1011 is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
Your Breacher Chap
CybercrimeFinancial

Your Breacher Chap is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Larry Dean Harmon
CybercrimeFinancial

Larry Dean Harmon is a cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
0malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.