APT
ATLAS
Atlas
Actors
147
Names
471
Sectors
40
Requirements
480
⌘K
▸
sign in
Atlas
Actors
147
Names
471
Sectors
40
Requirements
480
LOADING
UNC2596 (aka Karakurt, Cuba Ransomware Gang) · APT Atlas
Actors
/
Cybercrime
/
Europe
UNC2596
CRIME
RU · Russia
AKA
Karakurt · Cuba Ransomware Gang · Tropical Scorpius
Secureworks
:
GOLD IONIC
Targets
13
Sectors
0
Threat types
2
GIRs covered
0/480
Active since
2020
Pin to atlas
Watch
Share
Export
Also tracked as
2 vendor names · 3 other aliases
Open Rosetta Stone
Mandiant
UNC2596
Secureworks
GOLD IONIC
UNATTRIBUTED ALIASES
Karakurt
Cuba Ransomware Gang
Tropical Scorpius
Victimology
Geographic footprint · 13 countries
Region filter
Export
origin · Russia
targeted countries · 13
EUROPE ·
6
Andorra
·
Germany
·
France
·
United Kingdom
·
Italy
·
Poland
AMERICAS ·
2
Canada
·
United States
ASIA ·
5
Japan
·
South Korea
·
Philippines
·
Qatar
·
Vietnam
Sectors targeted
0 of 40
No sectors targeted yet for this actor.
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
ext · Extortion
RAN · Ransomware
MITRE ATT&CK · 0 techniques
No TTPs mapped yet.
GIR coverage
0 / 480 requirements satisfied
Open matrix
No GIRs mapped yet for this actor.
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
0 techniques · layer format 4.5
Related actors
By origin and actor type
APT44
nation-state
Russia · 25 targets · since 2009
FIN10
cybercrime
unattributed · 1 targets · since 2013
FIN2
cybercrime
unattributed · 0 targets · since —
FIN6
cybercrime
Russia · 15 targets · since 2014
UNC1543
cybercrime
unattributed · 22 targets · since —
FIN3
cybercrime
unattributed · 1 targets · since —