UnclassifiedUnknown
Yoru
Yoru is a threat actor group, tracked by Brandefense. It targets 9 sectors, including Government and Manufacturing, in 9 countries, including the United States and France. It uses 3 MITRE ATT&CK techniques.
- Techniques
- 3
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
How They Operate · MITRE ATT&CK.
3 techniques across 2 of 14 tacticsReconnaissance·
Resource Development·
Initial Access·
Execution·
Persistence·
Privilege Escalation·
Defense Evasion·
Credential Access·
Discovery1
T1491
Defacement
Defacement
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
About Yoru.
Threat actor who defaced the website of Husmann Zerkleinerungstechnik, placing a defacement file (yoru.txt) on the target domain via a Linux-based server.
Last updated Oct 27, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.