Cyber Frogy - Unified Threat Actor Dashboard

Unified Threat Actor Dashboard

Recent Actor Timeline Mentions (Heuristic)

Recent Actor Timeline Mentions (Heuristic)

State Sponsor vs Top Victims

State Sponsor vs Top Victims

State Sponsor vs Target Categories

State Sponsor vs Target Categories

Victims vs Target Categories

Victims vs Target Categories

Victims vs Incident Types

Victims vs Incident Types

Target Categories vs Incident Types

Target Categories vs Incident Types

State Sponsor vs Actor Country

State Sponsor vs Actor Country

Incident Type Distribution

Incident Type Distribution

Top Suspected State Sponsors

Top Suspected State Sponsors

Top Suspected Victims

Top Suspected Victims

Top Target Categories

Top Target Categories

Top Actor Country Codes

Top Actor Country Codes

Threat Actors Data Table

Use the dropdowns in each column header to filter the table by specific values.

ActorAliasesSuspected State SponsorSuspected VictimsTarget CategoriesIncident TypesCountryAttribution ConfidenceNumber of ReferencesNumber of Relationships
Operation DarkSeoul, Dark Seoul, Hidden Cobra, Hastati Group, Andariel, Unit 121, Bureau 121, NewRomanic Cyber Army Team, Bluenoroff, Subgroup: Bluenoroff, Group 77, Labyrinth Chollima, Operation Troy, Operation GhostSecret, Operation AppleJeus, APT38, APT 38, Stardust Chollima, Whois Hacking Team, Zinc, Appleworm, Nickel Academy, APT-C-26, NICKEL GLADSTONE, COVELLITE, ATK3, G0032, ATK117, G0082, Citrine Sleet, DEV-0139, DEV-1222, Diamond Sleet, ZINC, Sapphire Sleet, COPERNICIUM, TA404, Lazarus group, BeagleBoyz, Moonstone Sleet, Black ArtemisKorea (Democratic People's Republic of)South Korea, Bangladesh Bank, Sony Pictures Entertainment, United States, Thailand, France, China, Hong Kong, United Kingdom, Guatemala, Canada, Bangladesh, Japan, India, Germany, Brazil, Thailand, Australia, Cryptocurrency exchanges in South KoreaGovernment, Private sectorEspionage, SabotageKP50689
Pawn Storm, FANCY BEAR, Sednit, SNAKEMACKEREL, Tsar Team, TG-4127, STRONTIUM, Swallowtail, IRON TWILIGHT, Group 74, SIG40, Grizzly Steppe, G0007, ATK5, Fighting Ursa, ITG05, Blue Athena, TA422, T-APT-12, APT-C-20, UAC-0028, UAC-0001, FROZENLAKE, Sofacy, Forest Blizzard, BlueDelta, Fancy Bear, GruesomeLarchRussian FederationGeorgia, France, Jordan, United States, Hungary, World Anti-Doping Agency, Armenia, Tajikistan, Japan, NATO, Ukraine, Belgium, Pakistan, Asia Pacific Economic Cooperation, International Association of Athletics Federations, Turkey, Mongolia, OSCE, United Kingdom, Germany, Poland, European Commission, Afghanistan, Kazakhstan, ChinaGovernment, MilitaryEspionageRU50554
ZIRCONIUM, JUDGMENT PANDA, BRONZE VINEWOOD, Red keres, Violet Typhoon, TA412, ZirconiumCN422
TEMP.Periscope, TEMP.Jumper, Leviathan, BRONZE MOHAWK, GADOLINIUM, KRYPTONITE PANDA, G0065, ATK29, TA423, Red Ladon, ITG09, MUDCARP, ISLANDDREAMS, Gingham TyphoonChinaUnited States, Hong Kong, The Philippines, Asia Pacific Economic Cooperation, Cambodia, Belgium, Germany, Philippines, Malaysia, Norway, Saudi Arabia, Switzerland, United KingdomGovernment, Private sectorEspionageCN50363
Snake, VENOMOUS Bear, Group 88, Waterbug, WRAITH, Uroburos, Pfinet, TAG_0530, KRYPTON, Hippo Team, Pacifier APT, Popeye, SIG23, IRON HUNTER, MAKERSMARK, ATK13, G0010, ITG12, Blue Python, SUMMIT, UNC4210, Secret Blizzard, UAC-0144, UAC-0024, UAC-0003Russian FederationFrance, Romania, Kazakhstan, Poland, Tajikistan, Russia, United States, Saudi Arabia, Germany, India, Belarus, Netherlands, Iran, Uzbekistan, IraqGovernment, MilitaryEspionageRU50363
Twisted Kitten, Cobalt Gypsy, Crambus, Helix Kitten, APT 34, APT34, IRN2, ATK40, G0049, Evasive Serpens, Hazel Sandstorm, EUROPIUM, TA452, Earth SimnavazIran (Islamic Republic of)Israel, Kuwait, United States, Turkey, Saudi Arabia, Qatar, Lebanon, Middle EastGovernment, Private sector, Civil societyEspionageIR503614
G0096, TA415, Blackfly, Grayfly, LEAD, BARIUM, WICKED SPIDER, WICKED PANDA, BRONZE ATLAS, BRONZE EXPORT, Red Kelpie, G0044, Earth Baku, Amoeba, HOODOO, Brass Typhoon, Winnti, Double Dragon, TG-2633, Leopard TyphoonPeople's Republic of ChinaChina, France, Hong Kong, India, Italy, Japan, Myanmar, Netherlands, Singapore, South Korea, South Africa, Switzerland, Thailand, Turkey, United Kingdom, United StatesAutomotive, Business, Services, Cryptocurrency, Education, Energy, Financial, Healthcare, High-Tech, Intergovernmental, Media and Entertainment, Pharmaceuticals, Private sector, Retail, Telecommunications, TravelCN326
CARBON SPIDER, GOLD NIAGARA, Calcium, ATK32, G0046, G0008, Coreid, Carbanak, Sangria Tempest, ELBRUS, Carbon Spider, JokerStashFinancial TheftRU50313
DEEP PANDA, Codoso, WebMasters, KungFu Kittens, Black Vine, TEMP.Avengers, Group 13, PinkPanther, Shell Crew, BRONZE FIRESTONE, G0009, G0073, Pupa, Sunshop Group, Checkered TyphoonChinaUnited StatesPrivate sector, MilitaryEspionageCN50292
COLDRIVER, SEABORGIUM, TA446, GOSSAMER BEAR, BlueCharlie, Star Blizzard, TAG-53, IRON FRONTIER, UNC4057, Blue CallistoRU280
ATK233, G0125, Operation Exchange Marauder, Red Dev 13, Silk Typhoon, MURKY PANDACN100252
Quedagh, VOODOO BEAR, TEMP.Noble, IRON VIKING, G0034, ELECTRUM, TeleBots, IRIDIUM, Blue Echidna, FROZENBARENTS, UAC-0113, Seashell Blizzard, UAC-0082, APT44Russian FederationRussia, Lithuania, Kyrgyzstan, Israel, Ukraine, Belarus, Kazakhstan, Georgia, Poland, Azerbaijan, IranPrivate sector, GovernmentEspionageRU50247
GreedyTaotie, TG-3390, EMISSARY PANDA, TEMP.Hippo, Red Phoenix, Budworm, Group 35, ZipToken, Iron Tiger, BRONZE UNION, Lucky Mouse, G0027, Iron Taurus, Earth Smilodon, Circle Typhoon, Linen TyphoonUnknownUnited States, United Kingdom, France, Japan, Taiwan, India, Canada, China, Thailand, Israel, Australia, South Korea, Russia, Iran, TurkeyGovernment, Private sectorEspionageCN50221
ACTINIUM, DEV-0157, Blue Otso, BlueAlpha, G0047, IRON TILDEN, PRIMITIVE BEAR, Shuckworm, Trident Ursa, UAC-0010, Winterflounder, Aqua Blizzard, ActiniumUkraine, GermanyGovernmentRU212
Newscaster, Parastoo, iKittens, Group 83, NewsBeef, G0058, CharmingCypress, Mint SandstormIran (Islamic Republic of)U.S. government/defense sector websites, Saudi Arabia, Israel, Iraq, United KingdomGovernment, MilitaryEspionageIR502111
Clean Ursa, Cloud Atlas, OXYGEN, G0100, ATK116, Blue OdinRussian FederationAfghanistan, Armenia, Azerbaijan, Belarus, Belgium, Czech Republic, Greece, India, Iran, Italy, Kazakhstan, Kenya, Malaysia, Russia, South Africa, Suriname, Turkmenistan, Ukraine, United Kingdom, United States, VietnamGovernment, Private sectorEspionageRU50210
STONE PANDA, Menupass Team, happyyongzi, POTASSIUM, Red Apollo, CVNX, HOGFISH, Cloud Hopper, BRONZE RIVERSIDE, ATK41, G0045, Granite Taurus, TA429, Cicada, Purple TyphoonChinaJapan, India, South Africa, South Korea, Sweden, United States, Canada, Australia, France, Finland, United Kingdom, Brazil, Thailand, Switzerland, NorwayPrivate sector, GovernmentEspionageCN50201
SectorJ04, SectorJ04 Group, GRACEFUL SPIDER, GOLD TAHOE, Dudear, G0092, ATK103, Hive0065, CHIMBORAZO, Spandex TempestAustralia, Canada, Czech Republic, Germany, Hungary, India, Japan, Romania, Serbia, Singapore, South Korea, Spain, Thailand, Turkey, United Kingdom, United StatesEducation, Finance, Health, Retail, HospitalityRU193
Velvet Chollima, Black Banshee, Thallium, Operation Stolen Pencil, G0086, APT43, Emerald Sleet, THALLIUM, Springtail, Sparkling PiscesKorea (Democratic People's Republic of)Ministry of Unification, Sejong Institute, Korea Institute for Defense Analyses, GermanyGovernment, Private sectorEspionageKP501923
BERSERK BEAR, ALLANITE, CASTLE, DYMALLOY, TG-4192, Dragonfly, Crouching Yeti, Group 24, Havex, Koala Team, IRON LIBERTY, G0035, ATK6, ITG15, BROMINE, Blue Kraken, Ghost BlizzardRussian FederationUnited States, Germany, Turkey, China, Spain, France, Ireland, Japan, Italy, PolandPrivate sector, GovernmentEspionageRU75182
CHROMIUM, ControlX, TAG-22, FISHMONGER, BRONZE UNIVERSITY, AQUATIC PANDA, Red Dev 10, RedHotel, Charcoal Typhoon, BountyGlad, Red ScyllaAustralia, China, France, Germany, Hong Kong, Japan, Mongolia, Nepal, Nigeria, Philippines, Taiwan, Thailand, United Arab Emirates, United States, VietnamGambling companies, Government Institutions, Education, Media and Entertainment, Pro-democracy and human rights political organizations, Telecommunications, Religious organization, Cryptocurrency, Medical, Covid-19 research organizationsCN179
Cobalt Group, Cobalt Gang, GOLD KINGSWOOD, COBALT SPIDER, G0080, Mule Libra170
TEMP.Zagros, Static Kitten, Seedworm, MERCURY, COBALT ULSTER, G0069, ATK51, Boggy Serpens, Mango Sandstorm, TA450, Earth VetalaIran (Islamic Republic of)Saudi Arabia, Georgia, Turkey, Iraq, Israel, India, United Arab Emirates, Pakistan, United StatesGovernmentEspionageIR50172
TEMP.MixMaster, GOLD BLACKBURN, FIN12, Periwinkle Tempest, DEV-0193, Storm-0193, Trickbot LLC, UNC2053, Pistachio Tempest, DEV-0237, Storm-0230Russian FederationAustralia, Bahamas, Canada, Costa Rica, France, Germany, India, Ireland, Italy, Japan, Mexico, New Zealand, Spain, Switzerland, Taiwan, United Kingdom, Ukraine, United StatesDefense, Financial, Government, Healthcare, TelecommunicationsRU162
Storm-1811, CURLY SPIDER, STAC5777, Cardinal160
BRONZE PRESIDENT, HoneyMyte, Red Lich, TEMP.HEX, BASIN, Earth Preta, TA416, Stately Taurus, LuminousMoth, Polaris, TANTALUM, Twill TyphoonChinaUnited States, GermanyCivil societyEspionageCN50160
Newscaster Team, Magic Hound, G0059, Phosphorus, Mint Sandstorm, TunnelVision, COBALT MIRAGE, Agent SerpensIR50162
COSMIC WOLF, Marbled Dust, SILICON, Teal Kurma, UNC1326GermanyTR151
Gaza Hackers Team, Gaza cybergang, Gaza Cybergang, Operation Molerats, Extreme Jackal, Moonlight, ALUMINUM SARATOGA, G0021, BLACKSTEMPalestineUnited States, Israel, Palestine, Middle East, EuropeGovernment, Defense, Energy, Finance, Healthcare, Pharmaceuticals, Education, Media, NGOs, Civil Society, Legal, MilitaryEspionagePS151
APT 37, Group 123, Group123, InkySquid, Operation Daybreak, Operation Erebus, Reaper Group, Reaper, Red Eyes, Ricochet Chollima, ScarCruft, Venus 121, ATK4, G0067, Moldy Pisces, APT-C-28Korea (Democratic People's Republic of)South Korea, Japan, VietnamGovernment, Private sectorKP50153
Operation Cleaver, Op Cleaver, Tarh Andishan, Alibaba, TG-2889, Cobalt Gypsy, G0003Iran (Islamic Republic of)Canada, France, Israel, Mexico, Saudi Arabia, China, Germany, United States, Pakistan, South Korea, United Kingdom, India, Kuwait, Qatar, TurkeyPrivate sector, GovernmentEspionageIR501510
C-Major, Transparent Tribe, Mythic Leopard, ProjectM, APT36, APT 36, TMP.Lapis, Green Havildar, COPPER FIELDSTONE, Earth Karkaddan, Storm-0156PakistanCivil society, Military, GovernmentPK50152
SLIME57CN150
VIXEN PANDA, Ke3Chang, Playful Dragon, Metushy, Lurid, Social Network Team, Royal APT, BRONZE PALACE, BRONZE DAVENPORT, BRONZE IDLEWOOD, NICKEL, G0004, Red Vulture, Nylon Typhoon, MirageChinaEuropean Union, India, United Kingdom, GermanyGovernmentEspionageCN50141
COMMENT PANDA, PLA Unit 61398, Comment Crew, Byzantine Candor, Group 3, TG-8223, Comment Group, Brown Fox, GIF89a, ShadyRAT, G0006ChinaUnited States, Taiwan, Israel, Norway, United Arab Emirates, United Kingdom, Singapore, India, Belgium, South Africa, Switzerland, Canada, France, Luxembourg, JapanPrivate sector, GovernmentEspionageCN50131
Nian, BRONZE BUTLER, REDBALDKNIGHT, STALKER PANDA, G0060, Stalker Taurus, PLA Unit 61419, Swirl TyphoonChinaJapan, China, South Korea, Russian FederationPrivate sectorEspionageCN50131
Chinastrats, Patchwork, Monsoon, Sarit, Dropping Elephant, APT-C-09, ZINC EMERSON, ATK11, G0040, Orange Athos, Thirsty GeminiIndiaBangladesh, Sri Lanka, PakistanPrivate sector, MilitaryEspionageIN50133
Group 8, AURORA PANDA, Hidden Lynx, Tailgater Team, Dogfish, BRONZE KEYSTONE, G0025, Group 72, G0001, Axiom, HELIUM, Heart TyphoonChinaUnited States, Netherlands, Italy, Japan, United Kingdom, Belgium, Russia, Indonesia, Germany, Switzerland, ChinaGovernment, Private sector, Civil societyEspionageCN50133
OceanLotus Group, Ocean Lotus, OceanLotus, Cobalt Kitty, APT-C-00, SeaLotus, Sea Lotus, APT-32, APT 32, Ocean Buffalo, POND LOACH, TIN WOODLAWN, BISMUTH, ATK17, G0050, Canvas CycloneVietnamChina, Germany, United States, Vietnam, Philippines, Association of Southeast Asian NationsGovernment, Private sector, Civil societyEspionageVN50134
UNC2589, TA471, UAC-0056, Nascent Ursa, Nodaria, FROZENVISTA, Storm-0587, DEV-0587, Saint Bear, Lorec53, EMBER BEAR, Lorec Bear, Bleeding Bear, Cadet BlizzardRU130
Spring Dragon, ST Group, DRAGONFISH, BRONZE ELGIN, ATK1, G0030, Red Salamander, Lotus BLossom, Billbug, Lotus BlossomChinaJapan, Philippines, Hong Kong, Indonesia, Taiwan, VietnamMilitary, GovernmentEspionageCN50132
PIRATE PANDA, KeyBoy, Tropic Trooper, BRONZE HOBART, G0081, Red Orthrus, Earth CentaurCN50130
PLA Unit 78020, OVERRIDE PANDA, Camerashy, BRONZE GENEVA, G0019, Naikon, BRONZE STERLING, G0013ChinaIndia, Saudi Arabia, Vietnam, Myanmar, Singapore, Thailand, Malaysia, Cambodia, China, Philippines, South Korea, United States, Indonesia, LaosGovernment, Private sectorEspionageCN50123
OPERATION HANGOVER, Donot Team, APT-C-35, SectorE02, Orange KalaGermanyIN50121
SixLittleMonkeysBelarus, Russia, Mongolia, UkraineCN120
Group 100, COZY BEAR, The Dukes, Minidionis, SeaDuke, YTTRIUM, IRON HEMLOCK, Grizzly Steppe, G0016, ATK7, Cloaked Ursa, TA421, Blue Kitsune, ITG11, BlueBravo, Nobelium, UAC-0029Russian FederationUnited States, China, New Zealand, Ukraine, Romania, Georgia, Japan, South Korea, Belgium, Kazakhstan, Brazil, Mexico, Turkey, Portugal, India, GermanyGovernment, Private sectorEspionageRU50126
Moafee, BRONZE OVERBROOK, G0017, G0002, Shallow TaurusChinaUnited StatesPrivate sectorEspionageCN50122
COBALT DICKENS, Mabna Institute, TA407, TA4900, Yellow NabuIR110
DUBNIUM, Fallout Team, Karba, Luder, Nemim, Nemin, Tapaoux, Pioneer, Shadow Crane, APT-C-06, SIG25, TUNGSTEN BRIDGE, T-APT-02, G0012, ATK52, Zigzag HailKorea (Republic of)Japan, Russia, Taiwan, South Korea, ChinaPrivate sectorEspionageKR50113
APT 33, Elfin, MAGNALLIUM, Refined Kitten, HOLMIUM, COBALT TRINITY, G0064, ATK35, Peach Sandstorm, TA451Iran (Islamic Republic of)United States, Saudi Arabia, South KoreaPrivate sectorEspionageIR50114
CactusPete, KARMA PANDA, BRONZE HUNTLEY, COPPER, Red Beifang, G0131, PLA Unit 65017, Earth Akhlut, TAG-74ChinaEastern Europe, Japan, South Korea, Taiwan, United StatesMilitary, Government, Private sectorCN50110
Desert Falcon, Arid Viper, APT-C-23, Bearded Barbie, Two-tailed ScorpionPalestineUnited States, Israel, Palestine, Middle East, EuropeGovernment, Defense, Energy, Finance, Education, High-Tech, Telecoms, Transportation, Media, NGOs, Civil Society, Legal, MilitaryEspionagePS110
The ShadowBrokers, TSB, Shadow Brokers, ShadowBrokers110
DarkHalo, StellarParticle, NOBELIUM, Solar Phoenix, Midnight BlizzardRU100116
CIRCUIT PANDA, Temp.Overboard, HUAPI, Palmerworm, G0098, T-APT-03, Manga Taurus, Red Djinn, Earth Hundun, Canary Typhoon, MobworkCN110
Colourful Panda, BRONZE DUDLEYCN100
Operation Mermaid, Prince of Persia, FoudreIran (Islamic Republic of)Israel, Iran, France, China, Sweden, United States, United Kingdom, Germany, Syria, Italy, Denmark, Canada, Russia, Saudi Arabia, BahrainGovernment, Private sectorEspionageIR50100
Adept Libra100
GamblingPuppetChina, United States, Hong Kong, Malaysia, TaiwanGambling Websites, Information technology, Electronics Manufacturers, EducationCN100
UNC1151, TA445, PUSHCHA, Storm-0257, DEV-0257, UAC-0057BelarusGermany, Latvia, Lithuania, Poland, UkraineGovernmentBY50101
100
Maze Team, TWISTED SPIDER, GOLD VILLAGE, Storm-0216, DEV-0216, UNC2198, TUNNEL SPIDERRU100
SLIME34, DEV-0401, Cinnamon Tempest, Emperor DragonflyCN101
WANDERING SPIDER, White Dev 115, Dark Scorpius100
Chafer, REMIX KITTEN, COBALT HICKMAN, G0087, Radio Serpens, TA454, ITG07, Burgundy SandstormIR50100
TEMP.Beanie, Operation Woolen Goldfish, Operation Woolen-Goldfish, Thamar Reservoir, TimberwormIran (Islamic Republic of)Saudi Arabia, Venezuela, Afghanistan, United Arab Emirates, Iran, Israel, Iraq, Kuwait, Turkey, Canada, Yemen, United Kingdom, Egypt, Syria, JordanGovernment, MilitaryEspionageIR5099
SideWinder, Rattlesnake, APT-C-17, T-APT-04IndiaChina, Pakistan, Nepal, AfghanistanGovernment, Military, Private SectorIN92
DeathStalker, TA4563, EvilNum, Jointworm, KNOCKOUT SPIDER90
PIONEER KITTEN, PARISITE, UNC757, Lemon Sandstorm, RUBIDIUMIR91
UAC-0114, TA473, TAG-70, TA-473GermanyRU80
UNC5221, Red Dev 61GermanyCN83
Ransomed.vc80
FamousSparrow, UNC2286, Salt Typhoon, RedMike, OPERATOR PANDACN81
SKELETON SPIDER, ITG08, MageCart Group 6, White Giant, GOLD FRANKLIN, ATK88, G0037, Camouflage Tempest, TA4557, Storm-053883
HAMMER PANDA, TEMP.Zhenbao, NetTravelerChinaMongolia, Kazakhstan, Tajikistan, Germany, United Kingdom, India, Kyrgyzstan, South Korea, United States, Chile, Russia, China, Spain, Canada, MoroccoGovernment, MilitaryEspionageCN5080
Storm-0978, UAT-5647GermanyRU80
Salted Earth, Sturgeon Fisher, ShadowSilk, Silent Lynx, Cavalry Werewolf, SturgeonPhisher, Comrade SaigaGermanyKZ80
ChinaUnited States, GermanyGovernmentEspionageCN5080
8220 GangCN80
Butterfly, Morpho, Sphinx Moth70
IMPERIAL KITTEN, Yellow Liderc, Imperial Kitten, TA456, DUSTYCAVE, Crimson Sandstorm, Cuboid Sandstorm, Smoke Sandstorm, CURIUMIran (Islamic Republic of)United States, Israel, Middle East, EuropeDefense, Government, Military, Finance, Energy, Healthcare, Pharmaceuticals, Telecoms, High-Tech, Media, NGOs, Civil Society, Legal, Rail, TransportationEspionageIR5071
Tilded Team, EQGRP, G0020United StatesIran, Afghanistan, Syria, Yemen, Kenya, Russia, India, Mali, Algeria, United Kingdom, Pakistan, China, Lebanon, United Arab Emirates, LibyaGovernment, MilitaryEspionageUS5077
Blind EagleEcuador, Colombia, Spain, Panama, ChilePetroleum, Manufacturing, Financial, Private sector, GovernmentEspionage70
Slayer Kitten, G0052Iran (Islamic Republic of)Israel, Jordan, Saudi Arabia, Germany, United StatesGovernment, Private sector, Civil societyEspionageIR5071
70
LazyMeerkat, G0079, Obscure Serpens70
GOLD ESSEX, TA544, Storm-030270
PITTY PANDA, G0011, Temp.PittytigerCN5071
RU5070
AMERICIUM, BlackShadow, DEV-0022, Agrius, Agonizing Serpens, UNC2428, Black Shadow, SPECTRAL KITTENIR70
G0039, Suckfly, BRONZE OLIVE, Group 46CN5071
IceFog, Trident, RedFoxtrot, Red Wendigo, PLA Unit 69010, UAT-7290, Red FoxtrotChinaSouth Korea, United States, Japan, Germany, ChinaGovernment, MilitaryEspionageCN5070
70
Animal Farm, Snowglobe, ATK8FranceSyria, United States, Netherlands, Russia, Spain, Iran, China, Germany, Algeria, Norway, Malaysia, Turkey, United Kingdom, Ivory Coast, GreeceGovernment, Private sectorEspionageFR5070
CN60
LuoYuCN60
ATK113, G006161
Machete, machete-apt, APT-C-43, G0095UnknownVenezuela, Russia, Cuba, China, Belgium, Ecuador, Brazil, Spain, Germany, France, Colombia, Peru, Sweden, United States, MalaysiaMilitary, GovernmentEspionage5061
IQ60
KEYHOLE PANDA, MANGANESE, BRONZE FLEETWOOD, TEMP.Bottle, Mulberry Typhoon, Poisoned FlightCN61
60
Lebanese Cedar, DeftToreroLB61
COBALT EDGEWATER60
GOLD LOWELL60
MY60
Iran (Islamic Republic of)Iran, Pakistan, Israel, United StatesGovernment, Private sectorEspionageIR5060
PLA Navy, MAVERICK PANDA, BRONZE EDISON, SODIUM, Salmon TyphoonChinaUnited States, United Kingdom, Hong KongPrivate sector, MilitaryEspionageCN5060
WebsiicAfghanistan, India, Indonesia, Iran, Kyrgyzstan, Malaysia, Pakistan, Russia, Slovakia, Taiwan, Thailand, United Kingdom, Uzbekistan, VietnamMilitary, Government60
NIGHTSHADE PANDA, Red Pegasus, Group 27United StatesPharmaceuticals, Healthcare, Construction, Aerospace, Defense industrial baseCN60
60
PK60
UAC-0109RU60
TeamSpy, Team Bear, Anger Bear, IRON LYRICRussian FederationHungary, BelarusGovernment, Private sectorEspionageRU5061
COBALT LYCEUM, HEXANE, UNC1530, Spirlin, MYSTICDOME, siamesekitten, Chrono Kitten, Storm-0133Iran (Islamic Republic of)Israel, Middle EastGovernment, Energy, High-Tech, Telecomms, Education, Military, DefenseEspionageIR5060
SOURGUM, Candiru60
GOTHIC PANDA, TG-0110, Group 6, UPS, Buckeye, Boyusec, BORON, BRONZE MAYFAIR, Red Sylvan, Brocade TyphoonChinaUnited States, United Kingdom, Hong KongPrivate sectorEspionageCN5061
UNC302United States, Australia, Belgium, Germany, Japan, Lithuania, Netherlands, Spain, South Korea, Sweden, United KingdomInformation technology, Medical, Civil engineering, Business, Education, Gaming, Energy, Pharmaceuticals, Defense industrial baseCN50
Akira, PUNK SPIDER, GOLD SAHARA50
OSMIUM, Konni, VedaliaKP51
Gorgon Group, Subaat, ATK92, G0078, Pasty Gemini50
Red Dev 4, Alloy Taurus, Granite Typhoon, PHANTOM PANDACN53
50
Ruinous Ursa, Cadet BlizzardUkraineSabotageRU51
GOLD DRAKE50
Earth KashaCN50
G0076, ATK78UnknownUnited StatesPrivate sectorEspionage5050
50
Bitter, T-APT-17, APT-C-08, Orange Yali, TA397GermanyIN50
Sharp DragonGermanyCN50
50
BY50
50
50
50
Xenotime, G0088, ATK9150
Brazil, Central African Republic, Georgia, Kazakhstan, Moldova, Russia, Spain, Sudan, Taiwan, Ukraine, United Kingdom, United States50
Germany50
50
South Korea, Japan50
IR50
50
TA542, GOLD CRESTWOOD50
Conimes, CycldekChinaMalaysia, India, Indonesia, Japan, Philippines, Southeast Asia, South Korea, VietnamPrivate SectorCN7550
Emennet Pasargad, Holy Souls, MARNANBRIDGE, NEPTUNIUM, HAYWIRE KITTENIran (Islamic Republic of)United States, Israel, Middle East, EuropeGovernment, Finance, High-Tech, Telecoms, NGOs, Civil Society, Rail, EnergyInformation OperationsIR5050
DEV-0530, H0lyGh0stKP50
Network Battalion 6550
Strider, Sauron, Project Sauron, G0041United StatesRussia, Iran, Belgium, China, Sweden, RwandaGovernment, MilitaryEspionageUS5052
NUMBERED PANDA, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, IXESHE, BRONZE GLOBE, Hexagon TyphoonChinaTaiwan, JapanPrivate sector, GovernmentEspionageCN5051
PLA Unit 61486, PUTTER PANDA, MSUpdater, 4HCrew, SULPHUR, SearchFire, TG-6952, G0024ChinaU.S. satellite and aerospace sectorPrivate sector, GovernmentEspionageCN5051
SVCMONDR, G0023ChinaJapan, TaiwanPrivate sectorEspionageCN5050
Famous Chollima, UNC5267, Wagemole, Nickel Tapestry, Storm-1877, Void Dokkaebi, WaterPlum, PurpleBravoKP50
FIN4, G0085RO5050
VIOLIN PANDA, TH3Bug, Crawling TaurusCN5050
50
Lamberts, the Lamberts, APT-C-39, PLATINUM TERMINALUnited StatesGlobalPrivate sector, GovernmentEspionageUS5051
CopyCopRU50
GOLD SWATHMORE40
40
40
UA40
Red Dev 18, Earth BluecrowMiddle East, AsiaGovernment, Education, LogisticsCN40
Evasive Panda, DaggerflyHong Kong, Malaysia, India, Taiwan, Macao, NigeriaCN40
40
Money Libra40
Admin338, Team338, MAGNESIUM, admin@338, G0018ChinaHong Kong, United StatesGovernment, Private sector, Civil societyEspionageCN5041
CN5040
ChinaChina, Hong Kong, Kazakhstan, Taiwan, PhilippinesPrivate Sector, Gambling companies, Gaming, Information technology, Telecommunications, Government, Transportation systems, DissidentCN7540
DYNAMITE PANDA, TG-0416, SCANDIUM, PLA Navy, Wekby, G0026, Satin TyphoonChinaUnited StatesGovernment, Private sector, Civil societyEspionageCN5042
40
RU40
43
40
TA413, White Dev 940
Moses Staff, Marigold Sandstorm, DEV-0500, VENGEFUL KITTENIR41
G0015, Earth Aughisky40
PS40
DEV-0832, Vice Society41
G0029, Golfing TaurusCN5041
DEV-0829, Nwgen Team40
FruityArmor, G0038United Arab EmiratesUnited Arab Emirates, United KingdomCivil societyEspionageAE5041
UNC2849KZ40
40
40
ES40
40
IR5042
40
狼毒草North Korea, South Korea, Japan, China, Mongolia, Egypt, Saudi Arabia, Yemen, Oman, Iran, Iraq, Kuwait, Israel, Jordan, Gaza, Syria, Turkey, LebanonGovernment, Electronics Manufacturers, Universities, Religious organization40
40
TG2003, Elephant BeetleRU40
Aged Libra40
40
40
40
40
TA-ShadowCricket, Larva-24013CN40
Rancor group, Rancor, Rancor Group, G0075, Rancor TaurusChinaSingapore, CambodiaGovernment, Civil societyEspionageCN5040
CN40
Superman, BRONZE WALKERChinaMyanmar, Germany, Singapore, Canada, India, United States, South KoreaGovernment, Private sectorEspionageCN5040
Jade Sleet, UNC4899, PukchongKP41
BRONZE SILHOUETTE, VANGUARD PANDA, UNC3236, Insidious Taurus, VOLTZITE, Dev-0391, Storm-0391CN40
SN BlackmetaPS40
Bouncing Golf, APT-C-50IR40
RU40
GOLD MELODY, UNC96142
40
40
40
Duqu GroupIsraelIran, SudanMilitary, Government, Private sectorEspionageIL5040
CN40
SnakeCharmer40
Aggah, TH-15741
CN40
DeepCliff, Red Dev 340
40
Hive0118RU47
UNC3944, Muddled Libra, Oktapus, Scattered Swine, Scatter Swine, Octo Tempest, 0ktapus, Storm-0971, DEV-0971, Starfraud40
46
DEV-0450RU42
MAN1, TA51142
40
CN40
OPERA1ER, NXSMS, DESKTOP-GROUP30
FRwL, FromRussiaWithLove30
Genesis Day, Teng SnakeCN30
Nomadic OctopusRU30
IR30
30
30
UAC-0100, UAC-0106RU30
IR30
Germany30
DEV-0234CN30
LookingFrogCN30
30
30
G0033BR5031
TEMP.Warlock, UNC90231
G003131
30
SPRITE SPIDER30
KNOTWEED, DSIRFAT30
30
MA30
RU30
Oro0lxy, DarkShadowCN30
Shakthak, TA551, ATK236, G0127, Monster Libra30
IR30
LAPSUS$, DEV-0537, SLIPPY SPIDER, Strawberry Tempest, UNC3661, Lapsus31
UNC1945, CL-CRI-002530
SaffronRose, Saffron Rose, AjaxSecurityTeam, Ajax Security Team, Group 26, SayadIran (Islamic Republic of)United States, Iranian internet activistsMilitary, Civil societyEspionageIR5039
Indra, Gonjeshke DarandeIranCritical manufacturing, Transportation systemsSabotage30
Hive009130
SNEAKY PANDA, Elderwood, Elderwood Gang, SIG22, G0066ChinaUnited States, Canada, United Kingdom, Switzerland, Hong Kong, Australia, India, Taiwan, China, DenmarkPrivate sector, Civil societyEspionageCN5031
BRONZE WOODLAND, Rotten Tomato30
DarkUniverse, SIG2730
ANCHOR PANDA, QAZTeam, ALUMINUMChinaUnited States, United Kingdom, Germany, Australia, SwedenGovernment, MilitaryEspionageCN5035
G0014CN5031
Karakurt LairCanada, Germany, United Kingdom, United StatesExtortion33
KP30
TGR-STA-004330
G0013ChinaUnited States, South Korea, Saudi Arabia, Thailand, Vietnam, Malaysia, IndiaGovernmentEspionageCN5031
30
Ashen LepusPS30
CN30
NoName057, NoName05716, 05716nnm, Nnm05716Czech Republic, Denmark, Estonia, Lithuania, NATO, Norway, Poland, UkraineFinancial, Government, Military, Telecommunications, TransportationDenial of service30
Plaid Rain, UNC4453, GREATRIFT, INCENDIARY JACKALLebanonIsraelCritical manufacturing, Defense industrial base, Financial services, Food and agriculture, Government agencies and services, Healthcare, Pharmaceuticals, Information technology, Transportation systems, NGOs, Civil Society, Military, DefenseEspionageLB7531
Operation Poisoned News30
Hive012730
KurdistanGovernmentEspionage30
CN30
NG30
30
Covert GroveCN5030
BRONZE HIGHLANDChinaHong Kong, India, Malaysia, TaiwanGovernment, Individuals, UniversitiesEspionageCN5030
30
United States, Czech RepublicGovernmentDenial of service30
30
MASAN, CryptoCoreKP30
UNC3742Ukraine, Russia, Kazakhstan, MongoliaGovernment, Military, Logistics, Defense ContractorEspionageCN30
RU30
DEV-0322, Circle TyphoonCN30
BR30
Space PiratesCN30
MY30
G006330
30
30
Snooping Dragon30
30
IR30
Windy Phoenix30
Nimbus ManticoreIR30
CL-STA-0049, JewelbugCN30
30
Team Twiizer30
30
TAG-100, RedNovemberCN30
30
The Mask, Mask, Ugly FaceSpainMorocco, France, Libya, Venezuela, Poland, Brazil, Spain, United States, South Africa, Tunisia, United Kingdom, Switzerland, Iran, GermanyGovernment, Private sectorEspionageES5030
Evil Eye, Red Dev 16, Earth Empusa30
30
Spamouflage DragonCN30
APT49, AgainstTheWest30
JerseyMikes, TURBINE PANDA, BRONZE EXPRESS, TECHNETIUM, Taffeta TyphoonCN5032
CN30
LinkC30
GoldMouse, Golden RAT, ATK80SY30
UCAUA31
30
Vermin, SickSyncRU30
IR1031
Silence, WHISPER SPIDER30
LeafMiner, Raspite30
PoisonVine, APT-Q-20TW30
30
Storm-1837, Flying YetiRU30
30
TwoForOne, G0068, ATK3332
UnknownPalestine, United Arab Emirates, Qatar, Somalia, Syria, Canada, Germany, Serbia, Kuwait, Egypt, Saudi Arabia, Chile, Iraq, India, United States, Israel, Russia, South Korea, Jordan, Djibouti, Lebonon, Morocco, Iran, United Kingdom, Afghanistan, Oman, DenmarkGovernment, Civil societyEspionage5030
30
Budminer cyberespionage groupCN30
StrongPity, G0056TR5032
VN30
30
PS30
LAUNDRY BEAR, UAC-0190RU30
Empire Monkey, CobaltGoblin30
G0070LB5030
30
CN30
Outrider TigerGermany31
G0054UnknownArgentina, Ecuador, Brazil, Brunei, Peru, MalaysiaGovernmentEspionage5031
OilRig, GreenbugUnknownIraq, United Kingdom, Pakistan, IsraelPrivate sectorEspionage50313
APT-Q-95USChinaMilitary, Government, Private SectorEspionageUS2530
UNC535620
Core Werewolf20
CN20
Sticky WerewolfRU20
EncryptHub20
20
TAG-15020
20
20
20
PS20
VulzSecID20
20
BlueTravellerCN20
Personal Panda20
CN20
20
Ghost Security20
20
20
IR20
UAT-9921, VoidLink OperatorCN20
20
20
20
20
20
IT20
Russian Angry Hackers Did ItRU20
RU20
20
20
20
Earth Ammit, VENOMCN20
IN20
KP20
SkidSec Leaks20
20
20
20
20
IL20
20
APT-Q-5820
20
20
20
20
20
Saaiwc20
CN20
20
Piwiks20
20
CN20
Ethereal Panda, Storm-0919CN20
LandUpdate80820
Vengeful Wolf, room15520
CN20
20
UA21
DEV-0343IR20
20
20
RU20
20
CN20
20
Black CubeIL20
DEV-0196, QuaDreamIL20
Silent Ransom, TG272920
DEV-1084IR20
DEV-0665RU20
DEV-050421
20
CL STA 0048CN20
20
RU20
20
CN20
IR20
CN20
DEV-0206, Purple Vallhund21
20
BR20
KP20
20
20
CN20
CN20
DEV-024920
20
VN20
20
20
20
Storm-090020
DEV-129520
20
TaxOff20
CN20
20
CN20
20
20
20
20
20
20
CN20
CN20
DUNE, Storm-0842, Red SandstormIran (Islamic Republic of)United States, Israel, Middle East, EuropeGovernment, Healthcare, Pharmaceuticals, High-Tech, Telecomms, Education, Media, NGOs, Civil SocietyEspionage, Information Operations, SabotageIR5020
Cyber Anarchy SquadUA20
20
20
PS20
CN20
20
IL20
RedCurl, Red Wolf, GOLD BLADE20
CN20
Uteus20
UNC5454CN20
CN20
Bad Magic20
IR5020
G0036RU5021
20
G005120
20
OperationTroy, Guardian of Peace, GOP, WHOis Team, Andariel, Subgroup: Andariel, Onyx Sleet, PLUTONIUMKP5020
20
G005320
Topgear, Comnie, BLACKGEARCN20
20
Group 42, VOYEURIR5020
20
IndiaHigh-Tech, Military, EnergyCN20
ITsecTeamIran (Islamic Republic of)United States, Bank of America, US Bancorp, Fifth Third Bank, Citigroup, PNC, BB&T, Wells Fargo, Capital One, HSBC, AT&T, NYSEDenial of serviceIR5020
Russia, Ukraine, United StatesEspionageCN20
AustraliaGovernmentEspionage20
DEV-041320
UnknownSouth KoreaGovernment, Private sectorEspionageKP5020
20
Red HariasaKyrgyzstan, Malaysia, VietnamCN20
ChinaMalaysia, Indonesia, Philippines, United States, IndiaGovernmentEspionageCN5020
Islamic State Hacking Division, CCA, United Cyber Caliphate, UUC, CyberCaliphate20
GOLD ULRICK20
CYBORG SPIDERHealthcare22
G004320
20
G007220
BRONZE MEDLEY20
Cloudy Omega, EmdiviUnknownJapanGovernment, Private sectorEspionageCN5020
Sapphire Mushroom, Blue Mushroom, NuclearCrisisPrivate sector, Government, Military, Scientific Research, FinanceEspionage20
UkraineGovernmentEspionage20
20
GOLD HERON20
G0062CN5021
badbullzvenom, badbullz20
20
20
20
Korea (Republic of)China, North Korea, Japan, Nepal, Singapore, Russia, Poland, SwitzerlandGovernmentKR20
Hive0081 (IBM), SectorD01 (NHSC), xHunt campaign (Palo Alto), Hunter Serpens20
20
G005522
20
GOLD LAGOON20
20
20
G004820
20
21
Golden Falcon20
21
UNC788, CALANQUEIran (Islamic Republic of)Australia, Europe, Israel, Middle East, United StatesEducation, Government, Military, Defense, Energy, Finance, Healthcare, Pharmaceuticals, Civil Society, Legal, Manufacturing, Media, NGOs, PharmaceuticalsEspionageIR5022
21
Skipper TurlaRussian FederationUnited States, South Korea, United Kingdom, UzbekistanGovernment, Private sectorEspionageRU5020
21
20
China, France, Germany, India, Japan, North America, Russia, South Africa, South Korea, United KingdomGovernment, Journalists, NGOsKP21
CN20
Operation EvilTraffic20
Tropical ScorpiusUkraine, European Union22
DEV-0324, Sagrid, TA54321
BazzarCall, BazaCall20
Palmetto Fusion, Allanite21
IR23
CamoFeiIndia, Japan, Nepal, Russia, Taiwan, United StatesAviation, Energy22
UNC94Australia, Cambodia, Hong Kong, Singapore, VietnamGovernment, Education, TelecommunicationsCN20
20
20
20
ChinaAviation, Automotive, Education, Intergovernmental, Media and Entertainment, Information Technology, Religious OrganizationsFinancial Theft, EspionageCN25
IR20
20
Denmark, SwedenDenial of service20
20
20
PakistanPakistan, Iraq, Australia, Afghanistan, United Arab Emirates, Germany, India, United StatesGovernment, Civil societyEspionagePK5020
APT-Q-1220
Mimo20
20
Fraternal JackalIR5020
IAmTheKing20
RU10
10
10
10
CN5010
CN10
10
RU11
10
11
10
10
ChinaSouth Korea, JapanGovernment, Private sectorCN5010
RU5010
CN5010
RU10
KP10
NG5010
CN10
10
UA5010
CN10
10
111
10
10
10
CN5010
10
10
10
10
10
10
RU10
Eraleig10
CN5010
CN10
BY10
Anonymous 64TW10
10
RU10
10
1.php GroupCN5010
CN10
Group 41IR50110
RU10
116
10
CN10
10
RU5010
10
10
CN5010
CN10
10
CN5010
10
10
IR10
KP5010
UNC422110
10
CN10
10
AIZ10
CovertNetwork-1658, ORB07CN10
IR10
10
10
ID10
CN5010
10
CN5010
10
CN10
10
CN10
IR5010
10
10
10
IR10
changqixinyun, Black TechnologyCN10
ChinaTaiwan, United States, Vietnam, Solomon IslandsBiomedical, Government, Information technologyCN5010
RU10
CN10
CN10
10
10
10
CN5010
10
CN10
PLA Navy, Wisp TeamChinaUnited States, United Kingdom, Hong KongPrivate sector, MilitaryEspionageCN5012
Operation CargoTalon, Unknown-Group-90110
RU10
10
CN10
CN10
CN5010
10
10
CN10
10
CN5010
10
10
CN5010
10
CN10
10
Red ChimeraCN5010
CN5010
Actor24082010
CN10
CN10
CN5010
11
11
10
PK10
10
10
RU10
RU10
CN5010
10
TGR-STA-1030, Shadow Campaigns10
10
10
10
10
VN10
CN10
CN10
RU10
10
11
10
KP10
CN10
RU10
10
10
KP10
MA10
CN10
10
10
RU10
10
Hive014510
CN5010
RU10
CN10
10
Shiite_Harvest10
10
10
Jabaroot DZDZ10
RU10
RU10
10
CorporacaoXRat, CorporationXRat10
Golden Eye Dog, APT-Q-27,10
CN10
10
CN10
CN10
10
KP10
10
10
RU10
VN10
RU5010
DD4BC, AmbiorxUS5010
CN10
TunisianCyberArmyTN5010
10
SyrianElectronicArmy, SEASY5010
CN5010
CN5010
10
10
10
10
RU10
Manatee TempestRU12
ChinaUighursCivil societyEspionageCN5010
DEV-0381RU10
10
10
CN10
10
KP10
10
10
10
10
Storm-056910
10
BackDip, CloudComputating, QuarianLibya, Namibia, Sudan, Albania, Croatia, Georgia, Poland, Iran, Qatar, Saudi Arabia, Sri Lanka, UzbekistanGovernment, Telecomms10
CN10
10
10
Matanbuchus10
TaiwanFinancialCN10
10
10
10
10
10
TH-16310
10
APOTHECARY SPIDER10
10
DEV-0867EG10
10
RU10
10
10
DEV-1167ID10
SIG3710
DEV-079610
RADIUMCN11
CERIUMKP11
APT-C-38 (QiAnXin), SABER LION, TG-2884 (SCWX CTU)10
IR10
10
IT10
DEV-0215, LAWRENCIUMKP10
DEV-0228IR10
10
10
TA272110
10
CN10
10
10
10
IR10
10
10
NG16
South America, Asia, European UnionCN10
Lace Tempest10
CN10
10
10
Nemesis Kitten, Storm-0270IR11
10
10
Financial Theft15
12
TR10
ChinaEast Asia, Central Asia, Southeast Asia, The Middle East, Southern AfricaGovernment, Energy CompanyEspionageCN5010
BelarusEurope, Eastern Europe, South Asia, Northeast AfricaGovernmentEspionageBY5010
12
IR10
10
10
Vovan, Lexus10
10
10
RU10
10
TA569, UNC154311
Espionage10
Thief Libra10
Business Email Compromise10
Civil Society10
CN10
10
10
Private sector10
Hong Kong, TaiwanGovernment, EducationCN10
TaiwanSemiconductor IndustryCN10
Prying Libra10
10
10
10
8220 Mining Group10
ChinaPrivate SectorCN7510
IR10
10
CN10
Wine Tempest13
Actor21042610
Ivory Coast, Morocco, Cameroon, Senegal, Togo10
Smoke Sandstorm, BOHRIUM, IMPERIAL KITTENIR11
10
DEV-110110
DEV-104410
10
10
Nahr Elbard, Nahr el bared10
10
10
10
10
10
RU10
10
10
10
10
ALPHV Ransomware Group11
Russia10
IR10
10
10
10
UAT435610
10
RU10
CN10
CN10
11
CN15
Silver Fox10
Sapphire Sleet11
10
CN10
10
KP10
10
Iron Cyber Group10
CN10
10
Russian FederationUkraine, Austria, Russia, Saudi ArabiaPrivate sectorEspionageRU5010
ChinaChina, Myanmar, Hong Kong, TaiwanCivil society, GovernmentEspionageCN5010
10
KP10
Roaming Mantis Group10
10
10
10
10
10
10
10
10
10
Golden Chickens, Golden Chickens01, Golden Chickens 0111
Golden Chickens, Golden Chickens02, Golden Chickens 0211
CN10
12
CN13
10
10
10
10
CN10
10
10
Private sector, GovernmentEspionage10
10
10
10
PalestineIsraelMilitary, Defense, TransportationEspionagePS5010
10
10
Retefe Gang, Retefe GroupRU10
10
Operation RestyLink, Enelink10
10
10
IR10
CN10
12
10
10
10
KE10
10
10
RO10
Spandex Tempest11
10
VN10
CN10
10
10
10
10
Germany10
10
10
CN10
Balikbayan Foxes10
Turk Hack TeamTR5000
00
Lion Soldiers Team, Phantom TurkDenial of serviceTR5000
Crescent and StarDenial of serviceTR5000
01
Storm-011300
LY5000
01
00
ChinaMiddle East, Southeast Asian, France, Egypt, Sudan, South Sudan, Libya, Turkey, Saudi Arabia, Oman, Yemen, Sri Lanka, India, Pakistan, Iran, Afghanistan, Kuwait, Iraq, United Arab EmiratesGovernment, TelecommunicationsEspionageCN5000
Shrouded CrossbowCN5000
CN5000
RU5000
RU5000
VikingdomAE5000
FallagaTeamDefacementTN5000
IR5000
Denial of serviceTR5000
LadyBoyle00