Sowbug
Also known as: g0054
[Sowbug](https://attack.mitre.org/groups/G0054) is a threat group that has conducted targeted attacks against organizations in South America and Southeast Asia, particularly government entities, since at least 2015. (Citation: Symantec Sowbug Nov 2017)
Most affected countries
No data yet.
Most affected sectors
No data yet.
Priority mitigations
MITRE ATT&CK mitigations that cover the most techniques used by this group.
- Operating System Configuration (2 techniques covered)
- Execution Prevention (2 techniques covered)
- Active Directory Configuration (1 techniques covered)
- User Training (1 techniques covered)
- Restrict File and Directory Permissions (1 techniques covered)
- Privileged Process Integrity (1 techniques covered)
- Privileged Account Management (1 techniques covered)
- Password Policies (1 techniques covered)
MITRE ATT&CK techniques
Recent victims
No data yet.
Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.
Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.