Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

Orangeworm

1 incidentes 1 paises 1 sectores threat-actor null Ultimo: 2026-05-25

Aliases: Kwampirs backdoor, empresas farmacéuticas, proveedores de soluciones IT para el sector sanitario, fabricantes de equipos médicos

Ver en IntelTracker → APTTrail →

Orangeworm is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015, likely for the purpose of corporate espionage. Reverse engineering of Kwampirs, directly associated with Orangeworm activity, indicates significant functional and development overlaps with Shamoon.

Aliases del actor

Kwampirs backdoor empresas farmacéuticas proveedores de soluciones IT para el sector sanitario fabricantes de equipos médicos

Actores similares

backdoordiplomacyactor · 2 private-sector-offensiveactor · 1 capi-backdooractor · 1 apt-sectora05actor · 1 BackdoorDiplomacythreat-actor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
Web	unknown	attack.mitre.org	OSINT

Motivacion

Information theft and espionage

Tecnicas MITRE

T1059.001, T1027, T1046, T1027 - Obfuscated Files or Information, T1071, T1105 - Ingress Tool Transfer

Victimas

TTPs unicas

Info robada historica

N/D

Rescates reclamados

N/D

Pagos detectados

N/D

Paises afectados

United States (1)

Paises objetivo (OSINT)

Belgium

Brazil

Canada

Switzerland

Chile

China

Germany

Spain

France

Hong Kong

Sectores atacados

Software (1)

Sectores objetivo (OSINT)

Agriculture&ForestryManufacturingHealthCare & Social AssistanceTransportation&WarehousingInformation ServicesChemical&Pharmaceutical ManufacturingHospitalsComputer Design & ServicesComputer Systems Design Services