HOMETHREATSOCEANMAP
APT / THREAT GROUP

OCEANMAP

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.oceanmap

Threat Analysis

OCEANMAP is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://cert.gov.ua/article/6276894
→https://github.com/blackorbird/APT_REPORT/blob/master/APT28/APT28%20the%20long%20hand%20of%20Russian%20interests.pdf
→https://harfanglab.io/en/insidethelab/compromised-routers-infrastructure-target-europe-caucasus/
→https://medium.com/@knight0x07/analyzing-apt28s-oceanmap-backdoor-exploring-its-c2-server-artifacts-db2c3cb4556b
→https://thehackernews.com/2024/03/apt28-hacker-group-targeting-europe.html?m=1

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

win.oceanmapOCEANMAP

External Intelligence

Malpedia: win.oceanmap

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search OCEANMAP