ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
The Gorgon Group
0 incidentes
0 paises
0 sectores
apt PK Ultimo: -
Aliases: ATK92, G0078, Gorgon Group, Pasty Gemini, Subaat
The Gorgon Group is a threat actor that emerged in 2017, known for its dual-natured operations encompassing both cyber espionage and financially motivated cybercrime. This group is distinguished by its unique operational model, frequently leveraging shared infrastructure and tools to execute both targeted attacks against governmental entities and broader criminal campaigns. While details regarding its internal structure remain elusive, the group has evolved from utilizing readily available malware to customizing its tools, indicating a degree of operational adaptation. The Gorgon Group is assessed with high confidence to have its origins or strong connections to Pakistan, as evidenced by online personas of its members and observed attack infrastructure. Their primary motivation is two-fold: information theft and espionage targeting governmental organizations, alongside financial gain through cybercriminal activities. This blending of objectives, along with their consistent use of commo