ROMCOM is an evolving and sophisticated threat actor group that has been using the malware tool ROMCOM for espionage and financially motivated attacks...

Threat Actor Profile

RomCom

State-sponsored threat group originating from RU.

Real-Time Alerts

Actor Overview

Origin Country
RU

Suspected Victims

Germany

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on RomCom is published.

Actor Details

Primary Name
RomCom
Known Aliases
Storm-0978, UAT-5647
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →