CARR — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 19, 2025
Last Seen
July 13, 2026

CARR is an Advanced Persistent Threat (APT) group referenced in discussions surrounding industrial network security and hacktivism trends.

Overview

CARR is an Advanced Persistent Threat (APT) group referenced in discussions surrounding industrial network security and hacktivism trends. Its significance stems from associations with campaigns impacting industrial/control environments and from the broader threat landscape that emphasizes critical infrastructure protection, highlighting the need for ICS-specific defenses.

Related Threat Clusters

  • EU Sanctions Russia Over Ongoing Cyber Espionage Campaign

    The European Union has condemned and sanctioned Russia for a prolonged cyber espionage campaign targeting its member states. The campaign, orchestrated by the 16th Centre of the FSB, has involved infiltrating government…

    172 articles · Updated July 13, 2026
  • U.S. and Allies Release Guidance for Operational Technology Security

    The U.S. and six allied nations have published new security guidance aimed at protecting operational technology (OT) environments from cyber threats. This guidance includes recommendations on practices such as network…

    4 articles · Updated January 16, 2026
  • Hacktivism's Role in Global Conflicts

    Hacktivist campaigns are increasingly linked to global conflicts, particularly in the contexts of elections and the ongoing situations in Gaza and Ukraine. These actors are now often supported by state funding and…

    2 articles · Updated November 19, 2025
  • Hacktivism Linked to Global Conflicts and State Support

    Hacktivist campaigns are increasingly intertwined with global conflicts, notably in Gaza and Ukraine. These actors are now often supported by state funding and guidance, aligning their activities with national agendas.…

    2 articles · Updated November 19, 2025

Recent Intelligence Reports

  • Russian cyber-attacks and destabilising activities: Council sanctions nine individuals and four entities — Consilium.Europa.Eu · July 13, 2026
  • Global Agencies Release New Guidance to Secure Industrial Networks — Infosecurity-Magazine · January 15, 2026
  • Hacktivism: From digital protest to real-world threat — Securitybrief · November 19, 2025

CVSS v3.1 Breakdown