Home / Threat actors / Gorgon Group
Gorgon Group G0078
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
21
Techniques
4
Malware and tools
Gorgon Group is a threat group consisting of members who are suspected to be Pakistan-based or have other connections to Pakistan. The group has performed a mix of criminal and targeted attacks, including campaigns against government organizations in the United Kingdom, Spain, Russia, and the United States.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1588.002 Tool Initial Access
T1566.001 Spearphishing Attachment Execution
T1059.001 PowerShellT1059.003 Windows Command ShellT1059.005 Visual BasicT1106 Native APIT1204.002 Malicious File Persistence
T1112 Modify RegistryT1547.001 Registry Run Keys / Startup FolderT1547.009 Shortcut Modification Privilege Escalation
T1055.002 Portable Executable InjectionT1055.012 Process HollowingT1547.001 Registry Run Keys / Startup FolderT1547.009 Shortcut Modification Stealth
T1055.002 Portable Executable InjectionT1055.012 Process HollowingT1140 Deobfuscate/Decode Files or InformationT1564.003 Hidden Window Defense Impairment
T1112 Modify RegistryT1685 Disable or Modify Tools Command and Control
T1105 Ingress Tool Transfer © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.