ShellCodeX
Tools β€’ Events β€’ News β€’ Insights
Threat Group Profile

apt73

● Active β€” last 30 days
Victim claims 77
First seen Apr 2024
Last activity 06 Jul 2026
Tracked since β€”

Group overview

A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field. According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit.Source: https://github.com/crocodyli/ThreatActors-TTPs

Preferred targets

Public Sector Β· 14 Business Services Β· 10 Technology Β· 8 Financial Services Β· 6 Manufacturing Β· 5 Healthcare Β· 5

Most targeted countries

US Β· 7 GB Β· 5 MA Β· 4 BR Β· 4 AT Β· 4 TR Β· 3

Victim Claims Timeline

Back to radar
2m.ma
πŸ‡²πŸ‡¦ MA Telecommunication 2m.ma
centrum.sk
πŸ‡ΈπŸ‡° SK Telecommunication centrum.sk
asunim.co
πŸ‡¨πŸ‡΄ CO Energy asunim.co
egov.sc
πŸ‡ΈπŸ‡¨ SC Public Sector egov.sc
phb.com
πŸ‡©πŸ‡ͺ DE Manufacturing phb.com
whessoe.com.my
πŸ‡²πŸ‡Ύ MY Manufacturing whessoe.com.my
olpro.com.my
πŸ‡²πŸ‡Ύ MY Consumer Services olpro.com.my
ifmis.go.ke
πŸ‡°πŸ‡ͺ KE Public Sector ifmis.go.ke
algosaibi-gtb.com
πŸ‡ΈπŸ‡¦ SA Financial Services algosaibi-gtb.com
alx-pc.com
πŸ‡©πŸ‡ͺ DE Energy alx-pc.com
arrawdah.org.sa
πŸ‡ΈπŸ‡¦ SA Public Sector arrawdah.org.sa
cofaco.com
πŸ‡¨πŸ‡΄ CO Agriculture and Food Production cofaco.com
dunav.com
πŸ‡·πŸ‡Έ RS Transportation/Logistics dunav.com
grupo-principal.com
πŸ‡²πŸ‡½ MX Business Services grupo-principal.com
jgpetrucci.com
πŸ‡ΊπŸ‡Έ US Business Services jgpetrucci.com
medikaplaza.com
πŸ‡΅πŸ‡° PK Healthcare medikaplaza.com
providentgh.com
πŸ‡¬πŸ‡­ GH Business Services providentgh.com