Skip to content
Threat actors by type

Cybercrime Threat Actors.

Brandefense tracks 467 cybercrime syndicates. The most documented are Wizard Spider, TA505 and Storm-1811. The sectors they target most are Finance, Government and Manufacturing.

216 of 467 published profiles shown

Zeroplayer
CybercrimeFinancial

Zeroplayer is a cybercrime syndicate with a financial motive. It uses 3 MITRE ATT&CK techniques and exploits 2 known CVEs.

3TTPs
2exploited
0malware
AdvancedProfile →
Timcookapple
CybercrimeFinancial

Timcookapple is a cybercrime syndicate with a financial motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
0malware
IntermediateProfile →
D3f4c3rX
CybercrimeFinancial

D3f4c3rX is a cybercrime syndicate with a financial motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
0malware
IntermediateProfile →
RevengeHotels
aka TA558
CybercrimeFinancial

RevengeHotels is a cybercrime syndicate with a financial motive.

4TTPs
–No CVE data
24malware
AdvancedProfile →
GhostRedirectorChina
CybercrimeFinancial

GhostRedirector is a China-attributed cybercrime syndicate with a financial motive.

4TTPs
–No CVE data
6malware
AdvancedProfile →
XMLCTL
aka SectorJ149 · UAC-0050
CybercrimeFinancial

XMLCTL is a cybercrime syndicate with a financial motive. It targets the Finance sector. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
8malware
IntermediateProfile →
Eraleig
aka Eraleign · Erleig
CybercrimeFinancial

Eraleig is a cybercrime syndicate with a financial motive. It targets 5 sectors, including Government and Manufacturing. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
3malware
IntermediateProfile →
Ignoble Scorpius
CybercrimeFinancial

Ignoble Scorpius is a cybercrime syndicate with a financial motive. It targets the Manufacturing, and Construction and Real Estate sectors in the United States.

4TTPs
–No CVE data
6malware
AdvancedProfile →
Devman2
CybercrimeFinancial

Devman2 is a cybercrime syndicate with a financial motive. It targets 5 sectors, including Manufacturing and Technology, in 3 countries, including Germany and Japan.

4TTPs
–No CVE data
0malware
IntermediateProfile →
HexagonalRodentNorth Korea
aka Expel-TA-0001
CybercrimeFinancial

HexagonalRodent is a North Korea-attributed cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
6malware
AdvancedProfile →
Xillen Killers
CybercrimeFinancial

Xillen Killers is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
5malware
AdvancedProfile →
Jasper Sleet
aka DPRK-affiliated IT professionals
CybercrimeFinancial

Jasper Sleet is a cybercrime syndicate with a financial motive. It targets the Transportation and Logistics sector in the United States.

4TTPs
–No CVE data
4malware
AdvancedProfile →
GOLDEN CHOLLIMA
CybercrimeFinancial

GOLDEN CHOLLIMA is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
5malware
AdvancedProfile →
Russian cybercriminals
CybercrimeFinancial

Russian cybercriminals is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
4malware
AdvancedProfile →
PRESSURE CHOLLIMA
CybercrimeFinancial

PRESSURE CHOLLIMA is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
5malware
ExpertProfile →
Gentlemen ransomware operation
CybercrimeFinancial

Gentlemen ransomware operation is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
3malware
IntermediateProfile →
TigerJack
CybercrimeFinancial

TigerJack is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
4malware
IntermediateProfile →
Threat Actor bacen
aka Bacen
CybercrimeFinancial

Threat Actor bacen is a cybercrime syndicate with a financial motive. It targets organisations in Brazil. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
IntermediateProfile →
Jolly Scorpius
CybercrimeFinancial

Jolly Scorpius is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
2malware
AdvancedProfile →
NyxarGroup
CybercrimeFinancial

NyxarGroup is a cybercrime syndicate with a financial motive. It targets organisations in Chile. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
IntermediateProfile →
DriveSurge
CybercrimeFinancial

DriveSurge is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
1malware
AdvancedProfile →
Ianis Aleksandrovich Antropenko
CybercrimeFinancial

Ianis Aleksandrovich Antropenko is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
2malware
IntermediateProfile →
Rui-Siang Lin
aka Pharaoh
CybercrimeFinancial

Rui-Siang Lin is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
1malware
AdvancedProfile →
Raheim Hamilton
aka Sydney · ZeroAngel
CybercrimeFinancial

Raheim Hamilton is a cybercrime syndicate with a financial motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.