Threat actor
Gorbag
Tracked by CyberSIXT since 3 Nov · RSS
1Articles, all time
1Articles, last 30 days
1CVEs exploited, attributed · all time
0Research reports, all time
Activity
Quiet for 29 hourslast report 3 Nov1 article1 outlet
One article so far, 3 Nov. A pattern appears once more outlets cover Gorbag.
- Tue 3 Nov. Infosecurity. ESET says Gorbag targets Ukrainian officials with spyware. Cites a CVE in CISA KEV.
- Known exploited CVE
- Article naming Gorbag
- Articles a day, all coverage
Drawn: the only article.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 3 Nov | Article | Infosecurity | ESET says Gorbag targets Ukrainian officials with spyware |
Connections
1 exploited CVE. What the record links this actor to; hover or use the arrow keys.
In CISA KEV
Show as a listHide the list
- Exploited CVEs
- CVE-2025-8088
- Affected vendors
- RARLAB
CVEs exploited1
CVEs an article attributes to Gorbag, most covered first
- 8.4High94% EPSS · 21 articles
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for Gorbag.
Articles1
Drawn: the only article.
- ESET says Gorbag targets Ukrainian officials with spywareInfosecurityExploitedCVE-2025-8088