Gorgon Group
- ID
- G0078
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Gorgon Group is a threat group consisting of members who are suspected to be Pakistan-based or have other connections to Pakistan. The group has performed a mix of criminal and targeted attacks, including campaigns against government organizations in the United Kingdom, Spain, Russia, and the United States. [1]
Techniques used (16)
- T1055.002 Portable Executable Injection
- T1055.012 Process Hollowing
- T1059.001 PowerShell
- T1059.003 Windows Command Shell
- T1059.005 Visual Basic
- T1105 Ingress Tool Transfer
- T1106 Native API
- T1112 Modify Registry
- T1140 Deobfuscate/Decode Files or Information
- T1204.002 Malicious File
- T1547.001 Registry Run Keys / Startup Folder
- T1547.009 Shortcut Modification
- T1564.003 Hidden Window
- T1566.001 Spearphishing Attachment
- T1588.002 Tool
- T1685 Disable or Modify Tools