Namibia

Reported Context (5)

attacks mounted by the threat actor have resulted in victims in the Philippines, Taiwan, Afghanistan, Namibia, and likely South Korea. Evidence indicates that Bronze Sandcastle is most active in the UTC+8 time zone. Bronze Sandcastle Uses Sandboxie DLL Sideloading to Deploy Backdoors
observed, relating to users and organizations originating from South Sudan, South Africa, Nigeria, and Namibia, between January 2024 and September 2025.[^4] Ransomware incidents were similarly prevalent across South INTERPOL’s 2026 Africa Cyberthreat Report Highlights Fraud, Ransomware and Enforcement Gaps
CTU analysis of incidents between August 2025 and August 2026 revealed victims in the Philippines, Taiwan, Afghanistan, Namibia, and likely also the Republic of Korea (see Figure 10). BRONZE SANDCASTLE Uses DLL Sideloading to Deploy Modified Meterpreter-Based Payloads
Japan kazu KillSec KryBit LockBit logistics Malaysia Manufacturing MedusaLocker MetaEncryptor Myanmar namibia norway Panzer Peru Philippines PwnForums Qilin RaaS RansomHouse Ransomware Rehub Rhysida Safepay AhnLab’s September 2026 Ransomware Report Details Group Activity and Victim Trends
The ransomhouse ransomware group targeted the Namibian Defence Force (Namibia), seeking ransom after compromising its systems. Ransomhouse Claims to Have Targeted Namibia’s Defence Force

Malware (11)

People (6)

Threat Actors (30)

MITRE ATT&CK (18)

Vendors (1)

Products (6)

Tools (2)

Industries (17)

Countries (22)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.