Home / Threat actors / Gallmaker
Gallmaker G0084
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
6
Techniques
0
Malware and tools
Gallmaker is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017. The group has mainly targeted victims in the defense, military, and government sectors.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1566.001 Spearphishing Attachment Execution
T1059.001 PowerShellT1204.002 Malicious FileT1559.002 Dynamic Data Exchange Stealth
T1027 Obfuscated Files or Information Collection
T1560.001 Archive via Utility © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.