Intelligence // Cyber Threat Intel
THREAT ACTOR
DATABASE
Nation-state and criminal threat groups — attribution, targets, tradecraft, and notable operations. Sourced from MITRE ATT&CK, DOJ indictments, and open-source intelligence.
34 actors found
Active: 2006–2013
AerospaceDefenseEnergyManufacturingTelecommunications
aka Comment Crew · Comment Group · Comment Panda · TG-8223
▼ View intel
Active: 2009–present
Managed Service ProvidersHealthcareDefenseGovernmentAviation
aka Stone Panda · menuPass · Cloud Hopper · POTASSIUM +1
▼ View intel
Active: 2013–present
MaritimeNaval DefenseAviationResearchGovernment
aka BRONZE MOHAWK · TEMP.Periscope · Leviathan · GADOLINIUM +1
▼ View intel
Active: 2012–present
HealthcareTechnologyTelecommunicationsGamingGovernment
aka Double Dragon · Winnti · Barium · Wicked Panda +1
▼ View intel
Active: 2021–present
Electric GridWaterCommunicationsTransportationMilitary Logistics
aka Bronze Silhouette · Vanguard Panda · Dev-0391 · UNC3236
▼ View intel
Active: 2019–present
TelecommunicationsISPsLawful Intercept SystemsGovernment
aka Ghost Emperor · FamousSparrow · Earth Estries
▼ View intel
Active: 2021
Law FirmsDefense ContractorsThink TanksNGOsResearch
aka Operation Exchange Marauder
▼ View intel
Active: 2010–present
GovernmentPolitical CampaignsJournalistsHuman RightsElections
aka Zirconium · Judgment Panda · BRONZE VINEWOOD · Hurricane Panda
▼ View intel
Active: 2004–present
GovernmentMilitaryDefenseElectionsNATO
aka Fancy Bear · Sofacy · STRONTIUM · Sednit +3
▼ View intel
Active: 2008–present
GovernmentThink TanksHealthcareTechnologyPolitical Organizations
aka Cozy Bear · The Dukes · Midnight Blizzard · Nobelium +2
▼ View intel
Active: 2009–present
Critical InfrastructureEnergyElectionsUkraineMedia
aka Voodoo Bear · IRIDIUM · Seashell Blizzard · TeleBots +1
▼ View intel
Active: 1996–present
GovernmentMilitaryDiplomaticDefense ContractorsEnergy
aka Snake · Uroburos · Venomous Bear · Waterbug +2
▼ View intel
Active: 2013–present
Ukrainian GovernmentUkrainian MilitaryNGOsLaw Enforcement
aka Primitive Bear · Armageddon · Trident Ursa · Shuckworm +1
▼ View intel
Active: 2007–present
Financial InstitutionsHealthcareGovernmentInsurance
aka Indrik Spider · Dridex Gang · GOLD DRAKE · Manatee Tempest
▼ View intel
Active: 2013–present
AerospacePetrochemicalEnergyDefenseAviation
aka Elfin · Refined Kitten · Holmium · Peach Sandstorm +1
▼ View intel
Active: 2014–present
FinancialEnergyTelecommunicationsGovernmentMiddle East
aka OilRig · Helix Kitten · Crambus · COBALT GYPSY +1
▼ View intel
Active: 2014–present
JournalistsAcademicsHuman RightsDissidentsNuclear Experts
aka Charming Kitten · Phosphorus · Mint Sandstorm · Ajax Security Team +1
▼ View intel
Active: 2017–present
GovernmentTelecommunicationsDefenseMiddle EastCentral Asia
aka MERCURY · Static Kitten · Seedworm · TEMP.Zagros +1
▼ View intel
Active: 2020–present
IsraelDiamond IndustryHR FirmsInsuranceTransportation
aka Pink Sandstorm · AMERICIUM · DEV-0227
▼ View intel
Active: 2009–present
Financial InstitutionsCryptocurrencyDefenseMediaHealthcare
aka Hidden Cobra · Guardians of Peace · Zinc · Diamond Sleet +2
▼ View intel
Active: 2014–present
Financial InstitutionsSWIFT NetworkCentral BanksATMs
aka Stardust Chollima · CoperNickel · NICKEL GLADSTONE · BeagleBoyz
▼ View intel
Active: 2012–present
Think TanksGovernmentAcademiaKorea Policy ExpertsJournalists
aka Velvet Chollima · Thallium · Black Banshee · STOLEN PENCIL +1
▼ View intel
Active: 2015–present
DefenseHealthcareManufacturingFinance
aka Silent Chollima · Stonefly · Onyx Sleet · PLUTONIUM
▼ View intel
Active: 2012–present
South Korean GovernmentNorth Korean DefectorsHuman Rights OrganizationsJournalists
aka APT37 · Reaper · RedEyes · Ricochet Chollima +1
▼ View intel
Active: 2019–2022
Law FirmsManufacturingAgricultureIT Supply ChainHealthcare
aka Sodinokibi · GOLD SOUTHFIELD · Pinchy Spider
▼ View intel
Active: 2016–2022
HealthcareGovernmentFinancialCritical Infrastructure
aka GOLD BLACKBURN · UNC1878 · Conti Group · TrickBot Gang
▼ View intel
Active: 2019–present
HealthcareGovernmentManufacturingLegalEducation
aka GOLD MYSTIC · LockBit 3.0 · LockBit Black
▼ View intel
Active: 2019–present
FinancialHealthcareManufacturingEducationGovernment
aka TA505 · GOLD TAHOE · Lace Tempest
▼ View intel
Active: 2022–present
HospitalityGamingTechnologyFinancialTelecom
aka UNC3944 · Octo Tempest · Muddled Libra · Starfraud +1
▼ View intel
Active: 2015–present
RetailHospitalityRestaurantFinancialDefense
aka Carbanak · Navigator Group · GOLD NIAGARA · ITG14 +1
▼ View intel
Active: 2020–2021
EnergyManufacturingFinancialLegal
aka BlackMatter · Carbon Spider · ELBRUS
▼ View intel
Active: 2013–present
Indian MilitaryIndian GovernmentDefenseKashmir NGOsEducation
aka APT36 · Mythic Leopard · PROJECTM · TEMP.Lapis
▼ View intel
Active: 2012–present
Pakistani MilitaryPakistani GovernmentChina (border areas)NepalAfghanistan
aka Rattlesnake · Hardcore Nationalist · APT-C-17 · T-APT-04
▼ View intel
Active: 2012–present
Middle Eastern GovernmentsFinancial InstitutionsPalestinian AuthorityRegional Media
aka Gaza Cybergang · Extreme Jackal · MOONLIGHT · ALUMINUM SARATOGA
▼ View intel