Groundbait
Groundbait is a group targeting anti-government separatists in the self-declared Donetsk and Luhansk People’s Republics.
origin (suspected)
Ukraineattribution confidence: medium (50)
target sectors
Separatists
source: misp-galaxy1 refs →
Groundbait· Ukraine
Groundbait is a threat actor targeting anti-government separatists in Donetsk and Luhansk.
Analyst brief
Groundbait is a threat actor targeting anti-government separatists in the self-declared Donetsk and Luhansk People's Republics. The group primarily focuses on separatist factions and their infrastructure. Specific TTPs and tools are limited based on available data, but defenders should be vigilant against potential targeted phishing and malware implants. Defenders must enhance threat monitoring for operations in eastern Ukraine and pay close attention to any indicators of compromise.
unknown
FAQ2
In which geographic region does the Groundbait group primarily operate?
The Groundbait group primarily operates in eastern Ukraine, within the self-declared Donetsk and Luhansk People's Republics.
Who are the primary targets of the Groundbait threat actor?
The Groundbait group primarily targets anti-government separatists, their factions, and infrastructure.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.