Attor
Adversary group targeting diplomatic missions and governmental organisations.
target sectors
Private sectorGovernment
source: misp-galaxy1 refs →
Attor
Attor is a threat group conducting intelligence-focused cyber operations primarily against diplomatic missions and governmental organizations.
Analyst brief
Attor is a threat group that primarily targets diplomatic missions and governmental organizations. The group conducts intelligence-focused operations against the private sector and government entities. Although TTPs are limited, defenders should focus on targeted phishing and data exfiltration attempts, particularly against government and associated private bodies. Reviewing network segmentation and enforcing multi-factor authentication for high-profile official accounts is recommended.
unknown
FAQ2
What are the primary targets of the Attor group?
Attor primarily targets diplomatic missions and governmental organizations, along with the private sector and government entities.
What security measures should defenders take against the Attor group?
Defenders should focus on targeted phishing and data exfiltration attempts, review network segmentation, and enforce MFA for high-profile official accounts.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.