Threat actor
EraLeign (APT73)
Targeted sectorsGovernmentManufacturingRetailTechnologyAgriculture
Origin and motivation
Origin and motivation not attributed.
No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.
Recent claims
- metrabyte.cloudTechnology2026-07-24source ↗
- dgcement.comManufacturing2026-07-06source ↗
- azarestan.comBusiness & Professional Services2026-07-06source ↗
- vicentetrapani.comAgriculture2026-07-06source ↗
- westernint.comUnclassified2026-07-06source ↗
- aydeniz.comUnclassified2026-07-03source ↗
- flazio.comTechnology2026-07-02source ↗
- holidaypalace.comHospitality2026-07-02source ↗
- ritavo.comUnclassified2026-07-02source ↗
- viennaairport.com (SOLD TO 3RD PARTY)Transportation & Logistics2026-06-29source ↗
Leak-site claim activity
2026-012026-07
Related coverage
No tagged stories yet.
Actor profile data:RansomLook(CC BY 4.0). Leak-site claims are unverified.