Threat actor · G0071

Orangeworm

UnattributedNo public state or group attribution on record

Orangeworm is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015, likely for the purpose of corporate espionage. Reverse engineering of Kwampirs, directly associated with Orangeworm activity, indicates significant functional and development overlaps with Shamoon.

MITRE ATT&CK Techniques

T1021.002 T1071.001

Associated Malware

ArpKwampirsNetSysteminfocmdipconfignetstatroute

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.