kremlin_actors
Kremlin actors are described in the provided content as Russian-state actors that have conducted large-scale router compromise operations. The content specifically states that in 2018 they infected more than 500,000 small office and home routers with the sophisticated malware VPNFilter. The reporting context places these actors in the category of Russian-state hackers using compromised routers for purposes similar to other state-sponsored infrastructure operations. No more specific attribution, subgroup, or additional aliases are provided in the content beyond the name "kremlin_actors".
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Recent activity
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.