HOMETHREATSCredoMap
APT / THREAT GROUP

CredoMap

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.credomap

Threat Analysis

CredoMap is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.bushidotoken.net/2022/06/overview-of-russian-gru-and-svr.html
→https://cert.gov.ua/article/341128
→https://github.com/blackorbird/APT_REPORT/blob/master/APT28/APT28%20the%20long%20hand%20of%20Russian%20interests.pdf
→https://securityscorecard.com/research/apt28s-stealer-called-credomap
→https://www.cert.ssi.gouv.fr/uploads/CERTFR-2023-CTI-009.pdf

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

win.credomapCredoMap

External Intelligence

Malpedia: win.credomap

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search CredoMap