🇮🇷

APT404

APT Group Information theft and espionage

Also Known As 1 names

APT 404

Target Countries 25

Countries highlighted in red

Australia Belgium Burkina Faso Switzerland Chile Germany France United Kingdom Hong Kong Indonesia Israel India Cambodia Lao People's Democratic Republic Myanmar Malaysia Norway New Zealand Philippines Saudi Arabia Thailand United States Vietnam South Africa Zambia

Sectors Targeted

Other Services (except Public Administration) 81 Manufacturing Defense Public Administration 92 Computer Systems Design and Related Services 54151 Computer Systems Design Services 541512 Engineering Transportation Government Computer Systems Design and Related Services 5415 Employment Placement Agencies and Executive Search Services 56131 Administrative and Support Services 561 National Security and International Affairs 928 Professional, Scientific, and Technical Services 54 Research Shipping and Logistics NAICS:48 48 Newspaper Publishers 51111 Civic and Social Organizations 8134 NAICS:31 31 Religious, Grantmaking, Civic, Professional, and Similar Organizations 813 other Maritime-related targets across multiple verticals Food Services and Drinking Places 722 Grantmaking and Giving Services 8132 Publishing Industries (except Internet) 511 Accommodation and Food Services 72 Educational Services 61 Advertising Agencies 54181 Colleges, Universities, and Professional Schools 6113 Internet Publishing and Broadcasting and Web Search Portals 51913 Executive, Legislative, and Other General Government Support 9211

Details

Origin 🇮🇷 IR

Last Updated 16 Jun 2025

Malware Families 13

scanbox

dadstache

sorgu

unidentified_075

cactustorch

remcom

airbreak

grillmark

lazycat

sedll

NewCore

lunchmoney

darkstrat

MITRE ATT&CK 99

T1003 T1003.001 T1018 T1021 T1021.001 T1021.002 T1021.004 T1027 T1027.001 T1027.003 T1027.013 T1027.015 T1041 T1047 T1055 T1055.001 T1056 T1059 T1059.001 T1059.005 T1068 T1071.001 T1074 T1074.001 T1074.002 T1078 T1078.002 T1078.003 T1082 T1090 T1090.003 T1102 T1102.003 T1105 T1111 T1133 T1135 T1140 T1189 T1190 T1197 T1203 T1204 T1204.001 T1204.002 T1212 T1213 T1213.006 T1218 T1218.010 T1218.011 T1482 T1505 T1505.003 T1528 T1534 T1546 T1546.003 T1547 T1547.001 T1547.009 T1552 T1552.001 T1553 T1553.002 T1558 T1558.003 T1559 T1559.002 T1560 T1562 T1562.004 T1566 T1566.001 T1566.002 T1567 T1567.002 T1572 T1583 T1583.001 T1584 T1584.004 T1584.008 T1585 T1585.001 T1585.002 T1586 T1586.001 T1586.002 T1587 T1587.004 T1588 T1588.006 T1589 T1589.001 T1594 T1595 T1595.002 T1615

Related Zero-Days

No zero-day CVE linked to this actor