APT / THREAT GROUP
Defender
1
aliases
Intelligence Profile
Ransomware
Threat Analysis
Defender is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.
Intelligence Reports Mentioning Defender
Chinese LLMs Broaden the Gap Between Attackers & Defenders
Dark Reading· Jul 3, 2026
Catan and Mouse
Cisco Talos Blog· Jul 2, 2026
Cybercriminals Pose as Interpol in Phishing Emails to Infect Victims With Ransomware
Infosecurity Magazine· Jul 2, 2026
2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience
The Hacker News· Jul 1, 2026
BlueHammer Vulnerability Exploited in Ransomware Attacks
SecurityWeek· Jun 30, 2026
CISA: Windows BlueHammer flaw now exploited by ransomware gangs
BleepingComputer· Jun 30, 2026
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
The Hacker News· Jun 29, 2026
Defence Impairment Olympics
Huntress Blog· Jun 29, 2026
Quick Facts
TypeAPT / Threat Group
Aliases1
Also Known As
Defender
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.