Russian cybercriminal groups

GPTKB entity

Predicate	Object
gptkbp:instanceOf	cybercrime
gptkbp:activeYearsStart	1990s
gptkbp:activity	DDoS attacks phishing data theft ransomware attacks banking trojans malware development
gptkbp:associatedWith	Russian-speaking forums
gptkbp:connectsTo	gptkb:Russian_intelligence_agencies
gptkbp:countryOfOrigin	gptkb:Russia
https://www.w3.org/2000/01/rdf-schema#label	Russian cybercriminal groups
gptkbp:language	gptkb:Russian
gptkbp:motive	espionage disruption financial gain
gptkbp:notableBattle	gptkb:NotPetya gptkb:SolarWinds_hack gptkb:Colonial_Pipeline_ransomware_attack JBS ransomware attack Ukraine power grid attack
gptkbp:notableMember	gptkb:APT28 gptkb:Carbanak gptkb:FIN7 gptkb:Sandworm gptkb:Turla gptkb:Conti gptkb:APT29 gptkb:DarkSide gptkb:LockBit gptkb:REvil gptkb:Wizard_Spider gptkb:Evil_Corp BlackMatter
gptkbp:sanctionedBy	gptkb:European_Union gptkb:United_States
gptkbp:target	gptkb:government_agency healthcare organizations private companies financial institutions critical infrastructure
gptkbp:bfsParent	gptkb:Ryuk_ransomware_campaigns
gptkbp:bfsLayer	7