Unknownconfidence: 50G0054

SowbugSowbug

Also known as: G0054 · Sowbug

Known aliases
2
Target sectors
1
Attribution
State-sponsored

Profile

Sowbug has been conducting highly targeted cyber attacks against organizations in South America and Southeast Asia and appears to be heavily focused on foreign policy institutions and diplomatic targets. Sowbug has been seen mounting classic espionage attacks by stealing documents from the organizations it infiltrates.

Aliases· 2

Sowbug
G0054

Target sectors· 1

Government

Known victims· 6

  • Argentina
  • Ecuador
  • Brazil
  • Brunei
  • Peru
  • Malaysia

MITRE ATT&CK Group crosswalk

G0054

References

  1. https://www.symantec.com/connect/blogs/sowbug-cyber-espionage-group-targets-south-american-and-southeast-asian-governments
  2. https://www.cfr.org/interactive/cyber-operations/sowbug
  3. https://attack.mitre.org/groups/G0054/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
Greenbug
Actor
Thrip
Actor
Guacamaya
Actor
Honeybee
Actor
Avivore
Actor
Operation BugDrop
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.