UnclassifiedUnknown
Yoman
Yoman is a threat actor group, tracked by Brandefense. It targets the Media and Entertainment, and Retail and Consumer sectors in the United States and Russia. It uses 1 MITRE ATT&CK technique.
- Techniques
- 1
- Exploited CVEs
- No CVE data
- First seen
- Nov 1, 2026
- Last seen
- Nov 2, 2026
- Record updated
Who They Target.
Sectors · 2
Countries · 2
How They Operate · MITRE ATT&CK.
1 techniques across 1 of 14 tacticsReconnaissance·
Resource Development·
Initial Access·
Execution·
Persistence·
Privilege Escalation·
Defense Evasion·
Credential Access·
Discovery·
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Impact1
T1491.002
Defacement: External Defacement
Defacement: External Defacement
About Yoman.
Threat actor with no known team affiliation who defaced the homepages of A Little Candle Shop and orc-news.ru.
Last updated Nov 3, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.