Home / Threat actors / Orangeworm
Orangeworm G0071
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
2
Techniques
8
Malware and tools
Orangeworm is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015, likely for the purpose of corporate espionage. Reverse engineering of Kwampirs, directly associated with Orangeworm activity, indicates significant functional and development overlaps with Shamoon.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Lateral Movement
T1021.002 SMB/Windows Admin Shares Command and Control
T1071.001 Web Protocols © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.