Actors/Cybercrime/Europe

UNC2596

CRIMERU · Russia

AKA Karakurt · Cuba Ransomware Gang · Tropical Scorpius

Secureworks: GOLD IONIC

Targets13

Sectors0

Threat types2

GIRs mapped0/480

Active since2020

Also tracked as

2 vendor names · 3 other aliases

Mandiant

UNC2596

Secureworks

GOLD IONIC

UNATTRIBUTED ALIASESKarakurtCuba Ransomware GangTropical Scorpius

Geographic footprint · 13 countries

origin · Russiatargeted countries · 13

EUROPE · 6

AMERICAS · 2

ASIA · 5

0 of 40

No sectors targeted yet for this actor.

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ext · ExtortionRAN · Ransomware

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

0 / 480 requirements mapped

No GIRs mapped yet for this actor.

No supporting references have been recorded for this profile. Treat uncited claims as unverified.

Machine-readable exports of this profile

By origin and actor type