Gallmaker

MISP
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

[Gallmaker](https://attack.mitre.org/groups/G0084) is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017. The group has mainly targeted victims in the defense, military, and government sectors.(Citation: Symantec Gallmaker Oct 2018)

MITRE ATT&CK: View on MITRE
Techniques Used (6)
ID ATT&CK Tactics
T1027 Obfuscated Files or Information -
T1059.001 PowerShell -
T1204.002 Malicious File -
T1559.002 Dynamic Data Exchange -
T1560.001 Archive via Utility -
T1566.001 Spearphishing Attachment -
References (1)
Metadata
ID: 208
Created: 13/01/2026 17:48
Updated: 23/04/2026 04:00