Skip to content
UnclassifiedUnknown

Yoman

Yoman is a threat actor group, tracked by Brandefense. It targets the Media and Entertainment, and Retail and Consumer sectors in the United States and Russia. It uses 1 MITRE ATT&CK technique.

Techniques
1
Exploited CVEs
No CVE data
First seen
Nov 1, 2026
Last seen
Nov 2, 2026
Record updated

Who They Target.

How They Operate · MITRE ATT&CK.

1 techniques across 1 of 14 tactics

Reconnaissance·

Resource Development·

Initial Access·

Execution·

Persistence·

Privilege Escalation·

Defense Evasion·

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact1

T1491.002
Defacement: External Defacement

About Yoman.

Threat actor with no known team affiliation who defaced the homepages of A Little Candle Shop and orc-news.ru.

Last updated Nov 3, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.