Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

Group5

1 incidentes 1 paises 0 sectores threat-actor IR Ultimo: 2026-05-25

Aliases: G0043, eraleig ransomware, APT GROUP5

Ver en IntelTracker → APTTrail →

Group5 is a threat group with a suspected Iranian nexus, though this attribution is not definite. The group has targeted individuals connected to the Syrian opposition via spearphishing and watering holes, normally using Syrian and Iranian themes. Group5 has used two commonly available remote access tools (RATs), njRAT and NanoCore, as well as an Android RAT, DroidJack.

Aliases del actor

G0043 eraleig ransomware APT GROUP5

Actores similares

apt-group5actor · 1 apt-c-01actor · 2 apt-c-27actor · 2 apt-45actor · 2 apt-c-37actor · 1 apt-c-23actor · 1 hellsing-aptactor · 1 apt-c-44actor · 1 apt-c-38actor · 1 apt-c-12actor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
Web	unknown	citizenlab.ca	APT GROUP5 indicators and references
Repositorio	unknown	github.com	APT GROUP5 indicators and references
Web	unknown	raw.githubusercontent.com	APT GROUP5 indicators and references
Web	unknown	attack.mitre.org	OSINT

Motivacion