UnclassifiedUnknown

Yirxemor

Yirxemor is a threat actor group, tracked by Brandefense. It targets 5 sectors, including Government and Manufacturing, in 4 countries, including the United States and Indonesia.

Request IOC feed Request ATT&CK export

Techniques: 0
Exploited CVEs: No CVE data
First seen: Oct 29, 2026
Last seen: Oct 29, 2026
Record updated: Nov 5, 2026

Who They Target.

Sectors · 5

Government
Manufacturing
Healthcare
Retail and Consumer
Hospitality and Tourism

Countries · 4

USUnited States
IDIndonesia
IQIraq
CWCuraçao

About Yirxemor.

A threat actor observed on an underground forum posting a thread titled 'Indonesia Vaccine Database' in the DF Databases section, allegedly sharing vaccination-related data tied to Indonesia.

Last updated Nov 5, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.