MITRE ATT&CK / Groups / G0071

Orangeworm

ID
G0071
Source
attack.mitre.org
MITRE last modified
1 Aug 2026

Orangeworm is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015, likely for the purpose of corporate espionage.[1] Reverse engineering of Kwampirs, directly associated with Orangeworm activity, indicates significant functional and development overlaps with Shamoon.[2]

Techniques used (2)

Software used (8)

References

  1. Symantec Orangeworm April 2018
  2. Cylera Kwampirs 2022