Olympic Destroyer

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware which seems to have no function other than to disrupt computer systems related to the 2018 Winter Olympic event.

Threat Analysis

Olympic Destroyer is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://blog.talosintelligence.com/2018/02/olympic-destroyer.html

→http://blog.talosintelligence.com/2018/02/who-wasnt-responsible-for-olympic.html

→https://attack.mitre.org/groups/G0034

→https://cyber.wtf/2018/03/28/dissecting-olympic-destroyer-a-walk-through/

→https://enterprise.verizon.com/resources/reports/2019-data-breach-investigations-report.pdf

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

win.olympic_destroyerSOURGRAPEOlympic Destroyer

External Intelligence

Malpedia: win.olympic_destroyer

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Olympic Destroyer