Cyber Frogy - Unified Threat Actor Dashboard

Unified Threat Actor Dashboard

Recent Actor Timeline Mentions (Heuristic)

Recent Actor Timeline Mentions (Heuristic)

State Sponsor vs Top Victims

State Sponsor vs Top Victims

State Sponsor vs Target Categories

State Sponsor vs Target Categories

Victims vs Target Categories

Victims vs Target Categories

Victims vs Incident Types

Victims vs Incident Types

Target Categories vs Incident Types

Target Categories vs Incident Types

State Sponsor vs Actor Country

State Sponsor vs Actor Country

Incident Type Distribution

Incident Type Distribution

Top Suspected State Sponsors

Top Suspected State Sponsors

Top Suspected Victims

Top Suspected Victims

Top Target Categories

Top Target Categories

Top Actor Country Codes

Top Actor Country Codes

Threat Actors Data Table

Use the dropdowns in each column header to filter the table by specific values.

ActorAliasesSuspected State SponsorSuspected VictimsTarget CategoriesIncident TypesCountryAttribution ConfidenceNumber of ReferencesNumber of Relationships
Operation DarkSeoul, Dark Seoul, Hidden Cobra, Hastati Group, Andariel, Unit 121, Bureau 121, NewRomanic Cyber Army Team, Bluenoroff, Subgroup: Bluenoroff, Group 77, Labyrinth Chollima, Operation Troy, Operation GhostSecret, Operation AppleJeus, APT38, APT 38, Stardust Chollima, Whois Hacking Team, Zinc, Appleworm, Nickel Academy, APT-C-26, NICKEL GLADSTONE, COVELLITE, ATK3, G0032, ATK117, G0082, Citrine Sleet, DEV-0139, DEV-1222, Diamond Sleet, ZINC, Sapphire Sleet, COPERNICIUM, TA404, Lazarus group, BeagleBoyz, Moonstone SleetKorea (Democratic People's Republic of)South Korea, Bangladesh Bank, Sony Pictures Entertainment, United States, Thailand, France, China, Hong Kong, United Kingdom, Guatemala, Canada, Bangladesh, Japan, India, Germany, Brazil, Thailand, Australia, Cryptocurrency exchanges in South KoreaGovernment, Private sectorEspionage, SabotageKP50689
Pawn Storm, FANCY BEAR, Sednit, SNAKEMACKEREL, Tsar Team, TG-4127, STRONTIUM, Swallowtail, IRON TWILIGHT, Group 74, SIG40, Grizzly Steppe, G0007, ATK5, Fighting Ursa, ITG05, Blue Athena, TA422, T-APT-12, APT-C-20, UAC-0028, FROZENLAKE, Sofacy, Forest Blizzard, BlueDelta, Fancy Bear, GruesomeLarchRussian FederationGeorgia, France, Jordan, United States, Hungary, World Anti-Doping Agency, Armenia, Tajikistan, Japan, NATO, Ukraine, Belgium, Pakistan, Asia Pacific Economic Cooperation, International Association of Athletics Federations, Turkey, Mongolia, OSCE, United Kingdom, Germany, Poland, European Commission, Afghanistan, Kazakhstan, ChinaGovernment, MilitaryEspionageRU50554
ZIRCONIUM, JUDGMENT PANDA, BRONZE VINEWOOD, Red keres, Violet Typhoon, TA412, ZirconiumCN422
TEMP.Periscope, TEMP.Jumper, Leviathan, BRONZE MOHAWK, GADOLINIUM, KRYPTONITE PANDA, G0065, ATK29, TA423, Red Ladon, ITG09, MUDCARP, ISLANDDREAMS, Gingham TyphoonChinaUnited States, Hong Kong, The Philippines, Asia Pacific Economic Cooperation, Cambodia, Belgium, Germany, Philippines, Malaysia, Norway, Saudi Arabia, Switzerland, United KingdomGovernment, Private sectorEspionageCN50363
Snake, VENOMOUS Bear, Group 88, Waterbug, WRAITH, Uroburos, Pfinet, TAG_0530, KRYPTON, Hippo Team, Pacifier APT, Popeye, SIG23, IRON HUNTER, MAKERSMARK, ATK13, G0010, ITG12, Blue Python, SUMMIT, UNC4210, Secret Blizzard, UAC-0144, UAC-0024, UAC-0003Russian FederationFrance, Romania, Kazakhstan, Poland, Tajikistan, Russia, United States, Saudi Arabia, Germany, India, Belarus, Netherlands, Iran, Uzbekistan, IraqGovernment, MilitaryEspionageRU50363
Twisted Kitten, Cobalt Gypsy, Crambus, Helix Kitten, APT 34, APT34, IRN2, ATK40, G0049, Evasive Serpens, Hazel Sandstorm, EUROPIUM, TA452, Earth SimnavazIran (Islamic Republic of)Israel, Kuwait, United States, Turkey, Saudi Arabia, Qatar, Lebanon, Middle EastGovernment, Private sector, Civil societyEspionageIR503514
G0096, TA415, Blackfly, Grayfly, LEAD, BARIUM, WICKED SPIDER, WICKED PANDA, BRONZE ATLAS, BRONZE EXPORT, Red Kelpie, G0044, Earth Baku, Amoeba, HOODOO, Brass Typhoon, Winnti, Double Dragon, TG-2633, Leopard TyphoonPeople's Republic of ChinaChina, France, Hong Kong, India, Italy, Japan, Myanmar, Netherlands, Singapore, South Korea, South Africa, Switzerland, Thailand, Turkey, United Kingdom, United StatesAutomotive, Business, Services, Cryptocurrency, Education, Energy, Financial, Healthcare, High-Tech, Intergovernmental, Media and Entertainment, Pharmaceuticals, Private sector, Retail, Telecommunications, TravelCN326
CARBON SPIDER, GOLD NIAGARA, Calcium, ATK32, G0046, G0008, Coreid, Carbanak, Sangria Tempest, ELBRUS, Carbon Spider, JokerStashFinancial TheftRU50313
DEEP PANDA, Codoso, WebMasters, KungFu Kittens, Black Vine, TEMP.Avengers, Group 13, PinkPanther, Shell Crew, BRONZE FIRESTONE, G0009, G0073, Pupa, Sunshop Group, Checkered TyphoonChinaUnited StatesPrivate sector, MilitaryEspionageCN50292
COLDRIVER, SEABORGIUM, TA446, GOSSAMER BEAR, BlueCharlie, Star Blizzard, TAG-53, IRON FRONTIER, UNC4057, Blue CallistoRU280
ATK233, G0125, Operation Exchange Marauder, Red Dev 13, Silk Typhoon, MURKY PANDACN100252
Quedagh, VOODOO BEAR, TEMP.Noble, IRON VIKING, G0034, ELECTRUM, TeleBots, IRIDIUM, Blue Echidna, FROZENBARENTS, UAC-0113, Seashell Blizzard, UAC-0082, APT44Russian FederationRussia, Lithuania, Kyrgyzstan, Israel, Ukraine, Belarus, Kazakhstan, Georgia, Poland, Azerbaijan, IranPrivate sector, GovernmentEspionageRU50247
GreedyTaotie, TG-3390, EMISSARY PANDA, TEMP.Hippo, Red Phoenix, Budworm, Group 35, ZipToken, Iron Tiger, BRONZE UNION, Lucky Mouse, G0027, Iron Taurus, Earth Smilodon, Circle Typhoon, Linen TyphoonUnknownUnited States, United Kingdom, France, Japan, Taiwan, India, Canada, China, Thailand, Israel, Australia, Republic of Korea, Russia, Iran, TurkeyGovernment, Private sectorEspionageCN50221
Newscaster, Parastoo, iKittens, Group 83, NewsBeef, G0058, CharmingCypress, Mint SandstormIran (Islamic Republic of)U.S. government/defense sector websites, Saudi Arabia, Israel, Iraq, United KingdomGovernment, MilitaryEspionageIR502111
Clean Ursa, Cloud Atlas, OXYGEN, G0100, ATK116, Blue OdinRussian FederationAfghanistan, Armenia, Azerbaijan, Belarus, Belgium, Czech Republic, Greece, India, Iran, Italy, Kazakhstan, Kenya, Malaysia, Russia, South Africa, Suriname, Turkmenistan, Ukraine, United Kingdom, United States, VietnamGovernment, Private sectorEspionageRU50210
ACTINIUM, DEV-0157, Blue Otso, BlueAlpha, G0047, IRON TILDEN, PRIMITIVE BEAR, Shuckworm, Trident Ursa, UAC-0010, Winterflounder, Aqua Blizzard, ActiniumUkraine, GermanyGovernmentRU212
STONE PANDA, Menupass Team, happyyongzi, POTASSIUM, Red Apollo, CVNX, HOGFISH, Cloud Hopper, BRONZE RIVERSIDE, ATK41, G0045, Granite Taurus, TA429, Cicada, Purple TyphoonChinaJapan, India, South Africa, South Korea, Sweden, United States, Canada, Australia, France, Finland, United Kingdom, Brazil, Thailand, Switzerland, NorwayPrivate sector, GovernmentEspionageCN50201
SectorJ04, SectorJ04 Group, GRACEFUL SPIDER, GOLD TAHOE, Dudear, G0092, ATK103, Hive0065, CHIMBORAZO, Spandex TempestAustralia, Canada, Czech Republic, Germany, Hungary, India, Japan, Romania, Serbia, Singapore, South Korea, Spain, Thailand, Turkey, United Kingdom, United StatesEducation, Finance, Health, Retail, HospitalityRU193
Velvet Chollima, Black Banshee, Thallium, Operation Stolen Pencil, G0086, APT43, Emerald Sleet, THALLIUM, Springtail, Sparkling PiscesKorea (Democratic People's Republic of)Ministry of Unification, Sejong Institute, Korea Institute for Defense Analyses, GermanyGovernment, Private sectorEspionageKP501923
BERSERK BEAR, ALLANITE, CASTLE, DYMALLOY, TG-4192, Dragonfly, Crouching Yeti, Group 24, Havex, Koala Team, IRON LIBERTY, G0035, ATK6, ITG15, BROMINE, Blue Kraken, Ghost BlizzardRussian FederationUnited States, Germany, Turkey, China, Spain, France, Ireland, Japan, Italy, PolandPrivate sector, GovernmentEspionageRU75182
Cobalt Group, Cobalt Gang, GOLD KINGSWOOD, COBALT SPIDER, G0080, Mule Libra170
CHROMIUM, ControlX, TAG-22, FISHMONGER, BRONZE UNIVERSITY, AQUATIC PANDA, Red Dev 10, RedHotel, Charcoal Typhoon, BountyGlad, Red ScyllaAustralia, China, France, Germany, Hong Kong, Japan, Mongolia, Nepal, Nigeria, Philippines, Taiwan, Thailand, United Arab Emirates, United States, VietnamGambling companies, Government Institutions, Education, Media and Entertainment, Pro-democracy and human rights political organizations, Telecommunications, Religious organization, Cryptocurrency, Medical, Covid-19 research organizationsCN179
TEMP.Zagros, Static Kitten, Seedworm, MERCURY, COBALT ULSTER, G0069, ATK51, Boggy Serpens, Mango Sandstorm, TA450, Earth VetalaIran (Islamic Republic of)Saudi Arabia, Georgia, Turkey, Iraq, Israel, India, United Arab Emirates, Pakistan, United StatesGovernmentEspionageIR50162
BRONZE PRESIDENT, HoneyMyte, Red Lich, TEMP.HEX, BASIN, Earth Preta, TA416, Stately Taurus, LuminousMoth, Polaris, TANTALUM, Twill TyphoonChinaUnited States, GermanyCivil societyEspionageCN50160
Storm-1811, CURLY SPIDER, STAC5777, Cardinal160
TEMP.MixMaster, GOLD BLACKBURN, FIN12, Periwinkle Tempest, DEV-0193, Storm-0193, Trickbot LLC, UNC2053, Pistachio Tempest, DEV-0237, Storm-0230Russian FederationAustralia, Bahamas, Canada, Costa Rica, France, Germany, India, Ireland, Italy, Japan, Mexico, New Zealand, Spain, Switzerland, Taiwan, United Kingdom, Ukraine, United StatesDefense, Financial, Government, Healthcare, TelecommunicationsRU162
COSMIC WOLF, Marbled Dust, SILICON, Teal Kurma, UNC1326GermanyTR151
APT 37, Group 123, Group123, InkySquid, Operation Daybreak, Operation Erebus, Reaper Group, Reaper, Red Eyes, Ricochet Chollima, ScarCruft, Venus 121, ATK4, G0067, Moldy Pisces, APT-C-28Korea (Democratic People's Republic of)Republic of Korea, Japan, VietnamGovernment, Private sectorKP50153
SLIME57CN150
Gaza Hackers Team, Gaza cybergang, Gaza Cybergang, Operation Molerats, Extreme Jackal, Moonlight, ALUMINUM SARATOGA, G0021, BLACKSTEMPalestineUnited States, Israel, Palestine, Middle East, EuropeGovernment, Defense, Energy, Finance, Healthcare, Pharmaceuticals, Education, Media, NGOs, Civil Society, Legal, MilitaryEspionagePS151
C-Major, Transparent Tribe, Mythic Leopard, ProjectM, APT36, APT 36, TMP.Lapis, Green Havildar, COPPER FIELDSTONE, Earth Karkaddan, Storm-0156PakistanCivil society, Military, GovernmentPK50152
Operation Cleaver, Op Cleaver, Tarh Andishan, Alibaba, TG-2889, Cobalt Gypsy, G0003Iran (Islamic Republic of)Canada, France, Israel, Mexico, Saudi Arabia, China, Germany, United States, Pakistan, South Korea, United Kingdom, India, Kuwait, Qatar, TurkeyPrivate sector, GovernmentEspionageIR501510
VIXEN PANDA, Ke3Chang, Playful Dragon, Metushy, Lurid, Social Network Team, Royal APT, BRONZE PALACE, BRONZE DAVENPORT, BRONZE IDLEWOOD, NICKEL, G0004, Red Vulture, Nylon Typhoon, MirageChinaEuropean Union, India, United Kingdom, GermanyGovernmentEspionageCN50141
PIRATE PANDA, KeyBoy, Tropic Trooper, BRONZE HOBART, G0081, Red Orthrus, Earth CentaurCN50130
Chinastrats, Patchwork, Monsoon, Sarit, Dropping Elephant, APT-C-09, ZINC EMERSON, ATK11, G0040, Orange Athos, Thirsty GeminiIndiaBangladesh, Sri Lanka, PakistanPrivate sector, MilitaryEspionageIN50133
OceanLotus Group, Ocean Lotus, OceanLotus, Cobalt Kitty, APT-C-00, SeaLotus, Sea Lotus, APT-32, APT 32, Ocean Buffalo, POND LOACH, TIN WOODLAWN, BISMUTH, ATK17, G0050, Canvas CycloneVietnamChina, Germany, United States, Vietnam, Philippines, Association of Southeast Asian NationsGovernment, Private sector, Civil societyEspionageVN50134
COMMENT PANDA, PLA Unit 61398, Comment Crew, Byzantine Candor, Group 3, TG-8223, Comment Group, Brown Fox, GIF89a, ShadyRAT, G0006ChinaUnited States, Taiwan, Israel, Norway, United Arab Emirates, United Kingdom, Singapore, India, Belgium, South Africa, Switzerland, Canada, France, Luxembourg, JapanPrivate sector, GovernmentEspionageCN50131
Spring Dragon, ST Group, DRAGONFISH, BRONZE ELGIN, ATK1, G0030, Red Salamander, Lotus BLossom, Billbug, Lotus BlossomChinaJapan, Philippines, Hong Kong, Indonesia, Taiwan, VietnamMilitary, GovernmentEspionageCN50132
UNC2589, TA471, UAC-0056, Nascent Ursa, Nodaria, FROZENVISTA, Storm-0587, DEV-0587, Saint Bear, Lorec53, EMBER BEAR, Lorec Bear, Bleeding Bear, Cadet BlizzardRU130
Nian, BRONZE BUTLER, REDBALDKNIGHT, STALKER PANDA, G0060, Stalker Taurus, PLA Unit 61419, Swirl TyphoonChinaJapan, China, Korea (Republic of), Russian FederationPrivate sectorEspionageCN50131
Group 8, AURORA PANDA, Hidden Lynx, Tailgater Team, Dogfish, BRONZE KEYSTONE, G0025, Group 72, G0001, Axiom, HELIUM, Heart TyphoonChinaUnited States, Netherlands, Italy, Japan, United Kingdom, Belgium, Russia, Indonesia, Germany, Switzerland, ChinaGovernment, Private sector, Civil societyEspionageCN50133
Group 100, COZY BEAR, The Dukes, Minidionis, SeaDuke, YTTRIUM, IRON HEMLOCK, Grizzly Steppe, G0016, ATK7, Cloaked Ursa, TA421, Blue Kitsune, ITG11, BlueBravo, Nobelium, UAC-0029Russian FederationUnited States, China, New Zealand, Ukraine, Romania, Georgia, Japan, South Korea, Belgium, Kazakhstan, Brazil, Mexico, Turkey, Portugal, India, GermanyGovernment, Private sectorEspionageRU50126
Moafee, BRONZE OVERBROOK, G0017, G0002, Shallow TaurusChinaUnited StatesPrivate sectorEspionageCN50122
OPERATION HANGOVER, Donot Team, APT-C-35, SectorE02, Orange KalaGermanyIN50121
SixLittleMonkeysBelarus, Russia, Mongolia, UkraineCN120
PLA Unit 78020, OVERRIDE PANDA, Camerashy, BRONZE GENEVA, G0019, Naikon, BRONZE STERLING, G0013ChinaIndia, Saudi Arabia, Vietnam, Myanmar, Singapore, Thailand, Malaysia, Cambodia, China, Philippines, South Korea, United States, Indonesia, LaosGovernment, Private sectorEspionageCN50123
Newscaster Team, Magic Hound, G0059, Phosphorus, Mint Sandstorm, TunnelVision, COBALT MIRAGE, Agent SerpensIR50122
Desert Falcon, Arid Viper, APT-C-23, Bearded Barbie, Two-tailed ScorpionPalestineUnited States, Israel, Palestine, Middle East, EuropeGovernment, Defense, Energy, Finance, Education, High-Tech, Telecoms, Transportation, Media, NGOs, Civil Society, Legal, MilitaryEspionagePS110
CactusPete, KARMA PANDA, BRONZE HUNTLEY, COPPER, Red Beifang, G0131, PLA Unit 65017, Earth Akhlut, TAG-74ChinaEastern Europe, Japan, South Korea, Taiwan, USMilitary, Government, Private sectorCN50110
COBALT DICKENS, Mabna Institute, TA407, TA4900, Yellow NabuIR110
DUBNIUM, Fallout Team, Karba, Luder, Nemim, Nemin, Tapaoux, Pioneer, Shadow Crane, APT-C-06, SIG25, TUNGSTEN BRIDGE, T-APT-02, G0012, ATK52, Zigzag HailKorea (Republic of)Japan, Russia, Taiwan, South Korea, ChinaPrivate sectorEspionageKR50113
The ShadowBrokers, TSB, Shadow Brokers, ShadowBrokers110
CIRCUIT PANDA, Temp.Overboard, HUAPI, Palmerworm, G0098, T-APT-03, Manga Taurus, Red Djinn, Earth Hundun, Canary TyphoonCN110
DarkHalo, StellarParticle, NOBELIUM, Solar Phoenix, Midnight BlizzardRU100116
APT 33, Elfin, MAGNALLIUM, Refined Kitten, HOLMIUM, COBALT TRINITY, G0064, ATK35, Peach Sandstorm, TA451Iran (Islamic Republic of)United States, Saudi Arabia, South KoreaPrivate sectorEspionageIR50114
GamblingPuppetChina, United States, Hong Kong, Malaysia, TaiwanGambling Websites, Information technology, Electronics Manufacturers, EducationCN100
Chafer, REMIX KITTEN, COBALT HICKMAN, G0087, Radio Serpens, TA454, ITG07, Burgundy SandstormIR50100
Colourful Panda, BRONZE DUDLEYCN100
Maze Team, TWISTED SPIDER, GOLD VILLAGE, Storm-0216, DEV-0216, UNC2198, TUNNEL SPIDERRU100
WANDERING SPIDER, White Dev 115, Dark Scorpius100
100
Operation Mermaid, Prince of Persia, FoudreIran (Islamic Republic of)Israel, Iran, France, China, Sweden, United States, United Kingdom, Germany, Syria, Italy, Denmark, Canada, Russia, Saudi Arabia, BahrainGovernment, Private sectorEspionageIR50100
Adept Libra100
UNC1151, TA445, PUSHCHA, Storm-0257, DEV-0257, UAC-0057BelarusGermany, Latvia, Lithuania, Poland, UkraineGovernmentBY50101
SLIME34, DEV-0401, Cinnamon Tempest, Emperor DragonflyCN101
TEMP.Beanie, Operation Woolen Goldfish, Operation Woolen-Goldfish, Thamar Reservoir, TimberwormIran (Islamic Republic of)Saudi Arabia, Venezuela, Afghanistan, United Arab Emirates, Iran, Israel, Iraq, Kuwait, Turkey, Canada, Yemen, United Kingdom, Egypt, Syria, JordanGovernment, MilitaryEspionageIR5099
PIONEER KITTEN, PARISITE, UNC757, Lemon Sandstorm, RUBIDIUMIR91
DeathStalker, TA4563, EvilNum, Jointworm, KNOCKOUT SPIDER90
SideWinder, Rattlesnake, APT-C-17, T-APT-04IndiaChina, Pakistan, Nepal, AfghanistanGovernment, Military, Private SectorIN92
Storm-0978, UAT-5647GermanyRU80
ChinaUnited States, GermanyGovernmentEspionageCN5080
UAC-0114, TA473, TAG-70, TA-473GermanyRU80
Ransomed.vc80
UNC5221, Red Dev 61GermanyCN83
FamousSparrow, UNC2286, Salt Typhoon, RedMike, OPERATOR PANDACN81
8220 GangCN80
SKELETON SPIDER, ITG08, MageCart Group 6, White Giant, GOLD FRANKLIN, ATK88, G0037, Camouflage Tempest, TA4557, Storm-053883
Salted Earth, Sturgeon Fisher, ShadowSilk, Silent Lynx, Cavalry Werewolf, SturgeonPhisher, Comrade SaigaGermanyKZ80
HAMMER PANDA, TEMP.Zhenbao, NetTravelerChinaMongolia, Kazakhstan, Tajikistan, Germany, United Kingdom, India, Kyrgyzstan, South Korea, United States, Chile, Russia, China, Spain, Canada, MoroccoGovernment, MilitaryEspionageCN5080
IceFog, Trident, RedFoxtrot, Red Wendigo, PLA Unit 69010, UAT-7290, Red FoxtrotChinaSouth Korea, United States, Japan, Germany, ChinaGovernment, MilitaryEspionageCN5070
PITTY PANDA, G0011, Temp.PittytigerCN5071
LazyMeerkat, G0079, Obscure Serpens70
Blind EagleEcuador, Colombia, Spain, Panama, ChilePetroleum, Manufacturing, Financial, Private sector, GovernmentEspionage70
RU5070
70
Slayer Kitten, G0052Iran (Islamic Republic of)Israel, Jordan, Saudi Arabia, Germany, United StatesGovernment, Private sector, Civil societyEspionageIR5071
Butterfly, Morpho, Sphinx Moth70
AMERICIUM, BlackShadow, DEV-0022, Agrius, Agonizing Serpens, UNC2428, Black Shadow, SPECTRAL KITTENIR70
Animal Farm, Snowglobe, ATK8FranceSyria, United States, Netherlands, Russia, Spain, Iran, China, Germany, Algeria, Norway, Malaysia, Turkey, United Kingdom, Ivory Coast, GreeceGovernment, Private sectorEspionageFR5070
Tilded Team, EQGRP, G0020United StatesIran, Afghanistan, Syria, Yemen, Kenya, Russia, India, Mali, Algeria, United Kingdom, Pakistan, China, Lebanon, United Arab Emirates, LibyaGovernment, MilitaryEspionageUS5077
70
GOLD ESSEX, TA544, Storm-030270
G0039, Suckfly, BRONZE OLIVE, Group 46CN5071
CN60
WebsiicAfghanistan, India, Indonesia, Iran, Kyrgyzstan, Malaysia, Pakistan, Russia, Slovakia, Taiwan, Thailand, United Kingdom, Uzbekistan, VietnamMilitary, Government60
ATK113, G006161
Machete, machete-apt, APT-C-43, G0095UnknownVenezuela, Russia, Cuba, China, Belgium, Ecuador, Brazil, Spain, Germany, France, Colombia, Peru, Sweden, United States, MalaysiaMilitary, GovernmentEspionage5061
TeamSpy, Team Bear, Anger Bear, IRON LYRICRussian FederationHungary, BelarusGovernment, Private sectorEspionageRU5061
SOURGUM, Candiru60
KEYHOLE PANDA, MANGANESE, BRONZE FLEETWOOD, TEMP.Bottle, Mulberry Typhoon, Poisoned FlightCN61
60
GOTHIC PANDA, TG-0110, Group 6, UPS, Buckeye, Boyusec, BORON, BRONZE MAYFAIR, Red Sylvan, Brocade TyphoonChinaUnited States, United Kingdom, Hong KongPrivate sectorEspionageCN5061
NIGHTSHADE PANDA, Red Pegasus, Group 27United StatesPharmaceuticals, Healthcare, Construction, Aerospace, Defense industrial baseCN60
LuoYuCN60
MY60
IQ60
Iran (Islamic Republic of)Iran, Pakistan, Israel, United StatesGovernment, Private sectorEspionageIR5060
Lebanese Cedar, DeftToreroLB61
UAC-0109RU60
PLA Navy, MAVERICK PANDA, BRONZE EDISON, SODIUM, Salmon TyphoonChinaUnited States, United Kingdom, Hong KongPrivate sector, MilitaryEspionageCN5060
GOLD LOWELL60
PK60
60
COBALT EDGEWATER60
COBALT LYCEUM, HEXANE, UNC1530, Spirlin, MYSTICDOME, siamesekitten, Chrono Kitten, Storm-0133Iran (Islamic Republic of)Israel, Middle EastGovernment, Energy, High-Tech, Telecomms, Education, Military, DefenseEspionageIR5060
IMPERIAL KITTEN, Yellow Liderc, Imperial Kitten, TA456, DUSTYCAVE, Crimson Sandstorm, Cuboid Sandstorm, Smoke SandstormIran (Islamic Republic of)United States, Israel, Middle East, EuropeDefense, Government, Military, Finance, Energy, Healthcare, Pharmaceuticals, Telecoms, High-Tech, Media, NGOs, Civil Society, Legal, Rail, TransportationEspionageIR5061
Network Battalion 6550
Famous Chollima, UNC5267, Wagemole, Nickel Tapestry, Storm-1877, Void Dokkaebi, WaterPlum, PurpleBravoKP50
Red Dev 4, Alloy Taurus, Granite Typhoon, PHANTOM PANDACN53
50
Sharp DragonGermanyCN50
Conimes, CycldekChinaMalaysia, India, Indonesia, Japan, Philippines, Southeast Asia, South Korea, VietnamPrivate SectorCN7550
Brazil, Central African Republic, Georgia, Kazakhstan, Moldova, Russia, Spain, Sudan, Taiwan, Ukraine, United Kingdom, United States50
FIN4, G0085RO5050
50
VIOLIN PANDA, TH3Bug, Crawling TaurusCN5050
50
PLA Unit 61486, PUTTER PANDA, MSUpdater, 4HCrew, SULPHUR, SearchFire, TG-6952, G0024ChinaU.S. satellite and aerospace sectorPrivate sector, GovernmentEspionageCN5051
50
TA542, GOLD CRESTWOOD50
Earth KashaCN50
G0076, ATK78UnknownUnited StatesPrivate sectorEspionage5050
Strider, Sauron, Project Sauron, G0041United StatesRussia, Iran, Belgium, China, Sweden, RwandaGovernment, MilitaryEspionageUS5052
50
Gorgon Group, Subaat, ATK92, G0078, Pasty Gemini50
GOLD DRAKE50
50
IR50
Bitter, T-APT-17, APT-C-08, Orange Yali, TA397GermanyIN50
50
SVCMONDR, G0023ChinaJapan, TaiwanPrivate sectorEspionageCN5050
South Korea, Japan50
Emennet Pasargad, Holy Souls, MARNANBRIDGE, NEPTUNIUM, HAYWIRE KITTENIran (Islamic Republic of)United States, Israel, Middle East, EuropeGovernment, Finance, High-Tech, Telecoms, NGOs, Civil Society, Rail, EnergyInformation OperationsIR5050
OSMIUM, Konni, VedaliaKP51
BY50
Xenotime, G0088, ATK9150
Ruinous Ursa, Cadet BlizzardUkraineSabotageRU51
Akira, PUNK SPIDER, GOLD SAHARA50
UNC302United States, Australia, Belgium, Germany, Japan, Lithuania, Netherlands, Spain, South Korea, Sweden, United KingdomInformation technology, Medical, Civil engineering, Business, Education, Gaming, Energy, Pharmaceuticals, Defense industrial baseCN50
Lamberts, the Lamberts, APT-C-39, PLATINUM TERMINALUnited StatesGlobalPrivate sector, GovernmentEspionageUS5051
50
NUMBERED PANDA, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, IXESHE, BRONZE GLOBE, Hexagon TyphoonChinaTaiwan, JapanPrivate sector, GovernmentEspionageCN5051
50
DEV-0530, H0lyGh0stKP50
Germany50
Aged Libra40
40
CN40
Evasive Panda, DaggerflyHong Kong, Malaysia, India, Taiwan, Macao, NigeriaCN40
Admin338, Team338, MAGNESIUM, admin@338, G0018ChinaHong Kong, United StatesGovernment, Private sector, Civil societyEspionageCN5041
SnakeCharmer40
Red Dev 18, Earth BluecrowMiddle East, AsiaGovernment, Education, LogisticsCN40
40
Moses Staff, Marigold Sandstorm, DEV-0500, VENGEFUL KITTENIR41
TG2003, Elephant BeetleRU40
狼毒草North Korea, South Korea, Japan, China, Mongolia, Egypt, Saudi Arabia, Yemen, Oman, Iran, Iraq, Kuwait, Israel, Jordan, Gaza, Syria, Turkey, LebanonGovernment, Electronics Manufacturers, Universities, Religious organization40
CN5040
GOLD SWATHMORE40
UNC3944, Muddled Libra, Oktapus, Scattered Swine, Scatter Swine, Octo Tempest, 0ktapus, Storm-0971, DEV-0971, Starfraud40
BRONZE SILHOUETTE, VANGUARD PANDA, UNC3236, Insidious Taurus, VOLTZITE, Dev-0391, Storm-0391CN40
40
TA413, White Dev 940
ChinaChina, Hong Kong, Kazakhstan, Taiwan, PhilippinesPrivate Sector, Gambling companies, Gaming, Information technology, Telecommunications, Government, Transportation systems, DissidentCN7540
43
G0015, Earth Aughisky40
MAN1, TA51142
DEV-0450RU42
46
DYNAMITE PANDA, TG-0416, SCANDIUM, PLA Navy, Wekby, G0026, Satin TyphoonChinaUnited StatesGovernment, Private sector, Civil societyEspionageCN5042
Hive0118RU47
SN BlackmetaPS40
40
GOLD MELODY, UNC96142
40
Aggah, TH-15741
40
Money Libra40
Bouncing Golf, APT-C-50IR40
40
CN40
40
RU40
40
40
Duqu GroupIsraelIran, SudanMilitary, Government, Private sectorEspionageIL5040
UNC2849KZ40
IR5042
40
DeepCliff, Red Dev 340
40
PS40
40
Superman, BRONZE WALKERChinaMyanmar, Germany, Singapore, Canada, India, United States, South KoreaGovernment, Private sectorEspionageCN5040
ES40
DEV-0829, Nwgen Team40
40
DEV-0832, Vice Society41
Rancor group, Rancor, Rancor Group, G0075, Rancor TaurusChinaSingapore, CambodiaGovernment, Civil societyEspionageCN5040
40
Jade Sleet, UNC4899, PukchongKP41
FruityArmor, G0038United Arab EmiratesUnited Arab Emirates, United KingdomCivil societyEspionageAE5041
CN40
CN40
40
UA40
RU40
40
G0029, Golfing TaurusCN5041
30
United States, Czech RepublicGovernmentDenial of service30
G0013ChinaUnited States, South Korea, Saudi Arabia, Thailand, Vietnam, Malaysia, IndiaGovernmentEspionageCN5031
IR30
30
UNC3742Ukraine, Russia, Kazakhstan, MongoliaGovernment, Military, Logistics, Defense ContractorEspionageCN30
TEMP.Warlock, UNC90231
G0014CN5031
30
VN30
APT49, AgainstTheWest30
ANCHOR PANDA, QAZTeam, ALUMINUMChinaUnited States, United Kingdom, Germany, Australia, SwedenGovernment, MilitaryEspionageCN5035
LAPSUS$, DEV-0537, SLIPPY SPIDER, Strawberry Tempest, UNC3661, Lapsus31
KurdistanGovernmentEspionage30
Nimbus ManticoreIR30
Shakthak, TA551, ATK236, G0127, Monster Libra30
SPRITE SPIDER30
Storm-1837, Flying YetiRU30
30
Plaid Rain, UNC4453, GREATRIFT, INCENDIARY JACKALLebanonIsraelCritical manufacturing, Defense industrial base, Financial services, Food and agriculture, Government agencies and services, Healthcare, Pharmaceuticals, Information technology, Transportation systems, NGOs, Civil Society, Military, DefenseEspionageLB7531
30
OPERA1ER, NXSMS, DESKTOP-GROUP30
Vermin, SickSyncRU30
30
Outrider TigerGermany31
TAG-100, RedNovemberCN30
CN30
CN30
RU30
30
IR30
Spamouflage DragonCN30
Operation Poisoned News30
CN30
NG30
UAC-0100, UAC-0106RU30
MY30
30
Genesis Day, Teng SnakeCN30
PS30
Germany30
Hive012730
Indra, Gonjeshke DarandeIranCritical manufacturing, Transportation systemsSabotage30
Oro0lxy, DarkShadowCN30
MA30
Covert GroveCN5030
30
30
LookingFrogCN30
CN30
30
30
Karakurt LairCanada, Germany, United Kingdom, United StatesExtortion33
Team Twiizer30
TGR-STA-004330
DEV-0234CN30
KNOTWEED, DSIRFAT30
IR30
Nomadic OctopusRU30
FRwL, FromRussiaWithLove30
UNC1945, CL-CRI-002530
30
30
30
NoName057, NoName05716, 05716nnm, Nnm05716Czech Republic, Denmark, Estonia, Lithuania, NATO, Norway, Poland, UkraineFinancial, Government, Military, Telecommunications, TransportationDenial of service30
RU30
DEV-0322, Circle TyphoonCN30
BR30
BRONZE HIGHLANDChinaHong Kong, India, Malaysia, TaiwanGovernment, Individuals, UniversitiesEspionageCN5030
Space PiratesCN30
Hive009130
KP30
30
G0033BR5031
StrongPity, G0056TR5032
BRONZE WOODLAND, Rotten Tomato30
30
30
TwoForOne, G0068, ATK3332
LeafMiner, Raspite30
JerseyMikes, TURBINE PANDA, BRONZE EXPRESS, TECHNETIUM, Taffeta TyphoonCN5032
Windy Phoenix30
G006330
G0054UnknownArgentina, Ecuador, Brazil, Brunei, Peru, MalaysiaGovernmentEspionage5031
Budminer cyberespionage groupCN30
UCAUA31
G0070LB5030
IR1031
APT-Q-95USChinaMilitary, Government, Private SectorEspionageUS2530
LAUNDRY BEAR, UAC-0190RU30
PoisonVine, APT-Q-20TW30
30
Evil Eye, Red Dev 16, Earth Empusa30
SNEAKY PANDA, Elderwood, Elderwood Gang, SIG22, G0066ChinaUnited States, Canada, United Kingdom, Switzerland, Hong Kong, Australia, India, Taiwan, China, DenmarkPrivate sector, Civil societyEspionageCN5031
OilRig, GreenbugUnknownIraq, United Kingdom, Pakistan, IsraelPrivate sectorEspionage50313
Snooping Dragon30
30
LinkC30
GoldMouse, Golden RAT, ATK80SY30
UnknownPalestine, United Arab Emirates, Qatar, Somalia, Syria, Canada, Germany, Serbia, Kuwait, Egypt, Saudi Arabia, Chile, Iraq, India, United States, Israel, Russia, South Korea, Jordan, Djibouti, Lebonon, Morocco, Iran, United Kingdom, Afghanistan, Oman, DenmarkGovernment, Civil societyEspionage5030
30
30
G003131
IR30
Empire Monkey, CobaltGoblin30
The Mask, Mask, Ugly FaceSpainMorocco, France, Libya, Venezuela, Poland, Brazil, Spain, United States, South Africa, Tunisia, United Kingdom, Switzerland, Iran, GermanyGovernment, Private sectorEspionageES5030
DarkUniverse, SIG2730
Silence, WHISPER SPIDER30
CL-STA-0049, JewelbugCN30
SaffronRose, Saffron Rose, AjaxSecurityTeam, Ajax Security Team, Group 26, SayadIran (Islamic Republic of)United States, Iranian internet activistsMilitary, Civil societyEspionageIR5039
OperationTroy, Guardian of Peace, GOP, WHOis Team, Andariel, Subgroup: Andariel, Onyx Sleet, PLUTONIUMKP5020
CN20
DEV-1084IR20
KP20
Hive0081 (IBM), SectorD01 (NHSC), xHunt campaign (Palo Alto), Hunter Serpens20
LandUpdate80820
20
IR20
20
G0062CN5021
RU20
20
IAmTheKing20
IN20
PakistanPakistan, Iraq, Australia, Afghanistan, United Arab Emirates, Germany, India, United StatesGovernment, Civil societyEspionagePK5020
Group 42, VOYEURIR5020
20
20
DEV-129520
20
21
BlueTravellerCN20
Bad Magic20
20
20
21
Ghost Security20
20
20
20
PS20
GOLD ULRICK20
20
Core Werewolf20
SkidSec Leaks20
UA21
Personal Panda20
21
Operation EvilTraffic20
20
IR20
ITsecTeamIran (Islamic Republic of)United States, Bank of America, US Bancorp, Fifth Third Bank, Citigroup, PNC, BB&T, Wells Fargo, Capital One, HSBC, AT&T, NYSEDenial of serviceIR5020
CN20
20
Silent Ransom, TG272920
CN20
PS20
20
Islamic State Hacking Division, CCA, United Cyber Caliphate, UUC, CyberCaliphate20
CL STA 0048CN20
RU20
Ethereal Panda, Storm-0919CN20
20
UnknownSouth KoreaGovernment, Private sectorEspionageKP5020
CN20
20
CN20
CN20
Earth Ammit, VENOMCN20
CN20
20
CN20
20
UNC5454CN20
20
RU20
DEV-0343IR20
20
BR20
CN20
20
20
Fraternal JackalIR5020
20
20
IT20
DEV-0665RU20
IL20
PS20
APT-Q-5820
DEV-050421
Tropical ScorpiusUkraine, European Union22
IR20
20
20
20
Palmetto Fusion, Allanite21
VulzSecID20
20
DEV-0206, Purple Vallhund21
DEV-0196, QuaDreamIL20
CN20
Russian Angry Hackers Did ItRU20
20
CN20
Black CubeIL20
20
CN20
VN20
Skipper TurlaRussian FederationUnited States, South Korea, United Kingdom, UzbekistanGovernment, Private sectorEspionageRU5020
CN20
20
CN20
Uteus20
KP20
EncryptHub20
20
CN20
Golden Falcon20
20
20
IL20
20
BRONZE MEDLEY20
20
Russia, Ukraine, United StatesEspionageCN20
AustraliaGovernmentEspionage20
20
Cyber Anarchy SquadUA20
20
20
DEV-041320
20
G005522
DUNE, Storm-0842, Red SandstormIran (Islamic Republic of)United States, Israel, Middle East, EuropeGovernment, Healthcare, Pharmaceuticals, High-Tech, Telecomms, Education, Media, NGOs, Civil SocietyEspionage, Information Operations, SabotageIR5020
20
20
20
20
20
20
Korea (Republic of)China, North Korea, Japan, Nepal, Singapore, Russia, Poland, SwitzerlandGovernmentKR20
20
20
20
badbullzvenom, badbullz20
ChinaMalaysia, Indonesia, Philippines, United States, IndiaGovernmentEspionageCN5020
20
Sticky WerewolfRU20
20
GOLD LAGOON20
20
GOLD HERON20
20
20
20
20
20
20
UkraineGovernmentEspionage20
20
G0036RU5021
CYBORG SPIDERHealthcare22
Sapphire Mushroom, Blue Mushroom, NuclearCrisisPrivate sector, Government, Military, Scientific Research, FinanceEspionage20
Red HariasaKyrgyzstan, Malaysia, VietnamCN20
20
UNC94Australia, Cambodia, Hong Kong, Singapore, VietnamGovernment, Education, TelecommunicationsCN20
Piwiks20
20
20
Mimo20
20
ChinaAviation, Automotive, Education, Intergovernmental, Media and Entertainment, Information Technology, Religious OrganizationsFinancial Theft, EspionageCN25
Topgear, Comnie, BLACKGEARCN20
APT-Q-1220
Denmark, SwedenDenial of service20
CN20
BazzarCall, BazaCall20
IndiaHigh-Tech, Military, EnergyCN20
20
20
21
20
Vengeful Wolf, room15520
CamoFeiIndia, Japan, Nepal, Russia, Taiwan, USAviation, Energy22
IR23
20
20
UNC788, CALANQUEIran (Islamic Republic of)Australia, Europe, Israel, Middle East, USEducation, Government, Military, Defense, Energy, Finance, Healthcare, Pharmaceuticals, Civil Society, Legal, Manufacturing, Media, NGOs, PharmaceuticalsEspionageIR5022
China, France, Germany, India, Japan, North America, Russia, South Africa, South Korea, United KingdomGovernment, Journalists, NGOsKP21
20
G005120
20
G004320
G007220
G004820
20
DEV-0324, Sagrid, TA54321
DEV-024920
Cloudy Omega, EmdiviUnknownJapanGovernment, Private sectorEspionageCN5020
20
IR5020
CN20
20
G005320
20
20
10
11
VN10
CN10
CN10
CN10
10
10
CN10
RU10
CN10
10
CN10
CN10
Silver Fox10
10
10
10
RU10
10
CN10
10
ALPHV Ransomware Group11
KP10
CN5010
IR10
10
CN10
10
10
VN10
Golden Eye Dog, APT-Q-27,10
10
10
10
10
UAT435610
10
10
CN10
KP10
KP10
10
CN10
10
IR10
CN10
CN10
RU10
CN13
10
RU10
11
10
Eraleig10
CN10
BY10
10
RU10
10
10
10
Jabaroot DZDZ10
RU10
10
10
RU10
10
10
10
CN10
10
10
CN10
10
10
10
UNC422110
CN10
10
CN10
AIZ10
KP10
CovertNetwork-1658, ORB07CN10
10
10
ID10
10
10
10
Shiite_Harvest10
10
10
111
RU10
10
RU10
RU10
KP10
10
10
10
RU11
10
10
KP10
10
CN10
10
10
Red ChimeraCN5010
CN10
10
10
116
Anonymous 64TW10
CN10
10
CN10
10
10
RU10
10
Hive014510
10
RU10
10
10
RU10
CN10
MA10
CN10
10
CN10
10
IR10
CN15
10
12
10
SIG3710
10
10
10
Spandex Tempest11
Private sector, GovernmentEspionage10
10
10
10
12
10
10
IR10
10
10
10
10
RU10
CN5010
PLA Navy, Wisp TeamChinaUnited States, United Kingdom, Hong KongPrivate sector, MilitaryEspionageCN5012
10
10
10
10
APT-C-38 (QiAnXin), SABER LION, TG-2884 (SCWX CTU)10
10
10
TaiwanFinancialCN10
10
10
Civil Society10
Business Email Compromise10
Espionage10
Russia10
10
TH-16310
10
10
10
Matanbuchus10
10
BackDip, CloudComputating, QuarianLibya, Namibia, Sudan, Albania, Croatia, Georgia, Poland, Iran, Qatar, Saudi Arabia, Sri Lanka, UzbekistanGovernment, Telecomms10
10
10
10
10
10
10
10
10
10
10
10
10
Hong Kong, TaiwanGovernment, EducationCN10
NG5010
CN5010
CN5010
10
KP5010
10
CN5010
CN5010
CN5010
10
RU5010
RU5010
DD4BC, AmbiorxUS5010
Group 41IR50110
TunisianCyberArmyTN5010
UA5010
SyrianElectronicArmy, SEASY5010
CN5010
IR5010
10
11
10
CN5010
CorporacaoXRat, CorporationXRat10
CN5010
CN5010
10
10
Roaming Mantis Group10
10
10
CN5010
Nahr Elbard, Nahr el bared10
Sapphire Sleet11
Golden Chickens, Golden Chickens02, Golden Chickens 0211
Golden Chickens, Golden Chickens01, Golden Chickens 0111
10
10
Manatee TempestRU12
10
ChinaChina, Myanmar, Hong Kong, TaiwanCivil society, GovernmentEspionageCN5010
RU5010
Russian FederationUkraine, Austria, Russia, Saudi ArabiaPrivate sectorEspionageRU5010
Iron Cyber Group10
ChinaUighursCivil societyEspionageCN5010
ChinaSouth Korea, JapanGovernment, Private sectorCN5010
10
10
CN5010
CN5010
10
1.php GroupCN5010
10
Private sector10
10
TaiwanSemiconductor IndustryCN10
DEV-0867EG10
10
10
DEV-0381RU10
DEV-110110
10
RU10
DEV-104410
DEV-1167ID10
DEV-079610
RADIUMCN11
CERIUMKP11
IT10
Storm-056910
DEV-0215, LAWRENCIUMKP10
DEV-0228IR10
TA272110
CN10
CN5010
10
CN10
10
CN10
10
KP10
Balikbayan Foxes10
10
10
CN5010
10
RO10
VN10
CN10
KE10
10
10
Germany10
RedCurl, Red Wolf10
CN10
10
CN10
10
10
10
10
PalestineIsraelMilitary, Defense, TransportationEspionagePS5010
10
Retefe Gang, Retefe GroupRU10
10
Operation RestyLink, Enelink10
IR10
CN10
10
APOTHECARY SPIDER10
CN10
10
10
CN5010
10
RU10
10
10
10
ChinaTaiwan, United States, Vietnam, Solomon IslandsBiomedical, Government, Information technologyCN5010
IR10
12
BelarusEurope, Eastern Europe, South Asia, Northeast AfricaGovernmentEspionageBY5010
ChinaEast Asia, Central Asia, Southeast Asia, The Middle East, Southern AfricaGovernment, Energy CompanyEspionageCN5010
12
10
Financial Theft15
Nemesis Kitten, Storm-0270IR11
South America, Asia, European UnionCN10
NG16
TA569, UNC154311
Ivory Coast, Morocco, Cameroon, Senegal, Togo10
Wine Tempest13
ChinaPrivate SectorCN7510
8220 Mining Group10
Thief Libra10
Prying Libra10
10
Vovan, Lexus10
CN10
Actor21042610
10
10
10
10
IR10
CN10
10
10
CN5010
Lace Tempest10
10
CN10
IR10
10
Smoke Sandstorm, BOHRIUM, IMPERIAL KITTENIR11
10
10
TR10
10
ChinaMiddle East, Southeast Asian, France, Egypt, Sudan, South Sudan, Libya, Turkey, Saudi Arabia, Oman, Yemen, Sri Lanka, India, Pakistan, Iran, Afghanistan, Kuwait, Iraq, United Arab EmiratesGovernment, TelecommunicationsEspionageCN5000
01
LY5000
01
Storm-011300
VikingdomAE5000
FallagaTeamDefacementTN5000
CN5000
00
00
Denial of serviceTR5000
Lion Soldiers Team, Phantom TurkDenial of serviceTR5000
Shrouded CrossbowCN5000
Turk Hack TeamTR5000
LadyBoyle00
RU5000
IR5000
RU5000
Crescent and StarDenial of serviceTR5000