THREAT_ACTOR · G0120
Evilnum
Also known as: Evilnum
Profile
Evilnum is a financially motivated threat group that has been active since at least 2018.
MITRE ATT&CK ↗Techniques
11 ATT&CK techniques attributed to this actor.
Software
3 malware/tools attributed to this actor.
More_eggsLaZagneEVILNUM
Related corpus activity
9,370 indicators EXHIBIT techniques this actor uses. This is a shared-technique signal, not a first-party attribution to Evilnum.
| Indicator | Type | Family | Sev | Src |
|---|---|---|---|---|
| cve-2013-7471 | cve | — | 85 | 1 |
| cve-2007-5693 | cve | — | 85 | 1 |
| cve-2014-2321 | cve | — | 85 | 1 |
| cve-2017-18377 | cve | — | 85 | 1 |
| cve-2025-12057 | cve | — | 85 | 1 |
| cve-2026-5815 | cve | — | 85 | 1 |
| cve-2026-22584 | cve | — | 85 | 2 |
| cve-2018-8007 | cve | — | 85 | 1 |
| cve-2021-4045 | cve | — | 85 | 1 |
| cve-2025-34117 | cve | — | 85 | 1 |
| cve-2026-1969 | cve | — | 85 | 1 |
| cve-2026-3844 | cve | — | 85 | 1 |
| cve-2025-7852 | cve | — | 85 | 1 |
| cve-2025-34037 | cve | — | 85 | 1 |
| cve-2025-66478 | cve | — | 85 | 2 |
| cve-2025-0921 | cve | — | 85 | 2 |
| cve-2021-27076 | cve | — | 85 | 1 |
| cve-2024-1781 | cve | — | 85 | 1 |
| cve-2026-3102 | cve | — | 85 | 3 |
| cve-2023-44976 | cve | ransomware | 85 | 2 |
| cve-2020-17456 | cve | — | 85 | 1 |
| cve-2025-23304 | cve | — | 85 | 2 |
| cve-2021-25646 | cve | — | 85 | 1 |
| cve-2021-29441 | cve | — | 85 | 1 |
| cve-2022-47945 | cve | — | 85 | 1 |
| cve-2026-0740 | cve | — | 85 | 1 |
| cve-2025-34085 | cve | — | 85 | 1 |
| cve-2025-7443 | cve | — | 85 | 1 |
| cve-2017-17215 | cve | — | 85 | 2 |
| 7105caa6d4fd8a2c67523d385277528e556ae4f6 | hash | — | 80 | 2 |
Showing the top 30 by severity of 9,370.