Skip to content
brandefense.io
Request A Demo
UnclassifiedIdeologyAdvanced sophistication · Organisation

Void Rabisu

Void Rabisu is a Russia-attributed threat actor group with an ideological motive, tracked by Brandefense. It targets 3 sectors, including Government and Technology. It uses 23 MITRE ATT&CK techniques and exploits 3 known CVEs.

Also known as
  • Storm-0978
  • Tropical Scorpius
  • RomCom
Request IOC feedRequest ATT&CK export
Origin
Russia
Techniques
23
Exploited CVEs
3
First seen
Dec 15, 2025
Last seen
Dec 31, 2025
Record updated

Who They Target.

Sectors · 3
Labelsbdef-qf:latestespionageeurope

About Void Rabisu.

An adversary group that has broadened its operational scope beyond singular ransomware objectives, integrating espionage-aligned behaviors and targeting critical sectors. They employ sophisticated techniques for cloud and enterprise environments.

Last updated Sep 21, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.