Loading threat actor…
Africa Corps is a Kremlin-controlled Russian expeditionary force operating in Africa as the successor structure to the Wagner Group, particularly in the Sahel. It is widely described as being run by the Russian Ministry of Defense and as institutionalizing Wagner’s intervention model after Wagner’s drawdown in Mali. The organization supports partner regimes through combat operations, regime protection, military assistance, intelligence support, and influence activity aligned with Russian geopolitical objectives. In Mali, Africa Corps has operated alongside the Malian Armed Forces in campaigns against Tuareg rebel groups and jihadist organizations. Its activities have been linked to Russian military support that includes long-range one-way attack drones, giving Malian and Russian forces an expendable strike capability beyond the reach of some other tactical drone systems. Reporting also associates Africa Corps and affiliated propaganda channels with the promotion of Russian-manufactured variants of the Shahed-136 family in the Malian theater. Africa Corps is part of Russia’s broader effort to expand influence in the Sahel following coups in Mali, Burkina Faso, and Niger. This model combines military backing, intelligence support, regime security, and disinformation with transactional access to strategic resources and extractive industries. Russian-linked networks associated first with Wagner and later with Africa Corps have been tied to influence operations portraying Russia as a reliable security partner while undermining Western influence. The group’s operational profile in the Sahel has been marked by direct participation in counterinsurgency and counterterrorism operations and by repeated allegations of serious abuses against civilians. International reporting and UN human rights experts have documented continued Russian combat involvement in Malian-led operations and have reported torture, rape, forced disappearances, and extrajudicial killings. These tactics are assessed to have contributed to civilian harm, intensified local grievances, and aided insurgent recruitment rather than producing durable stability. Known aliases and predecessor relationships center on its role as Wagner Group’s successor in Africa rather than on a broad independent alias set. Africa Corps should therefore be understood as the current Russian state-backed continuation of Wagner’s security intervention architecture in parts of Africa, especially Mali.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
2 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Russian successor formation to Wagner operating in Mali alongside FAMa, assessed in the report as likely involved in deployment of Russian-manufactured Shahed-136/Geran type one-way attack drones for long-range strikes in northern Mali.
Russian Ministry of Defense-run force that replaced Wagner elements in the Sahel and continued combat involvement, training/support activities, and abusive counterterrorism operations.
Successor Russian proxy formation conducting influence operations and military special operations across Africa on behalf of Russia.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.