Unified Threat Actor Dashboard

Recent Actor Timeline Mentions (Heuristic)

Recent Actor Timeline Mentions (Heuristic)

State Sponsor vs Top Victims

State Sponsor vs Top Victims

State Sponsor vs Target Categories

State Sponsor vs Target Categories

Victims vs Target Categories

Victims vs Target Categories

Victims vs Incident Types

Victims vs Incident Types

Target Categories vs Incident Types

Target Categories vs Incident Types

State Sponsor vs Actor Country

State Sponsor vs Actor Country

Incident Type Distribution

Incident Type Distribution

Top Suspected State Sponsors

Top Suspected State Sponsors

Top Suspected Victims

Top Suspected Victims

Top Target Categories

Top Target Categories

Top Actor Country Codes

Top Actor Country Codes

Threat Actors Data Table

Use the dropdowns in each column header to filter the table by specific values.

ActorAliasesSuspected State SponsorSuspected VictimsTarget CategoriesIncident TypesCountryAttribution ConfidenceNumber of ReferencesNumber of Relationships
Operation DarkSeoul, Dark Seoul, Hidden Cobra, Hastati Group, Andariel, Unit 121, Bureau 121, NewRomanic Cyber Army Team, Bluenoroff, Subgroup: Bluenoroff, Group 77, Labyrinth Chollima, Operation Troy, Operation GhostSecret, Operation AppleJeus, APT38, APT 38, Stardust Chollima, Whois Hacking Team, Zinc, Appleworm, Nickel Academy, APT-C-26, NICKEL GLADSTONE, COVELLITE, ATK3, G0032, ATK117, G0082, Citrine Sleet, DEV-0139, DEV-1222, Diamond Sleet, ZINC, Sapphire Sleet, COPERNICIUM, TA404, Lazarus group, BeagleBoyz, Moonstone SleetKorea (Democratic People's Republic of)South Korea, Bangladesh Bank, Sony Pictures Entertainment, United States, Thailand, France, China, Hong Kong, United Kingdom, Guatemala, Canada, Bangladesh, Japan, India, Germany, Brazil, Thailand, Australia, Cryptocurrency exchanges in South KoreaGovernment, Private sectorEspionage, SabotageKP50689
Pawn Storm, FANCY BEAR, Sednit, SNAKEMACKEREL, Tsar Team, TG-4127, STRONTIUM, Swallowtail, IRON TWILIGHT, Group 74, SIG40, Grizzly Steppe, G0007, ATK5, Fighting Ursa, ITG05, Blue Athena, TA422, T-APT-12, APT-C-20, UAC-0028, FROZENLAKE, Sofacy, Forest Blizzard, BlueDelta, Fancy Bear, GruesomeLarchRussian FederationGeorgia, France, Jordan, United States, Hungary, World Anti-Doping Agency, Armenia, Tajikistan, Japan, NATO, Ukraine, Belgium, Pakistan, Asia Pacific Economic Cooperation, International Association of Athletics Federations, Turkey, Mongolia, OSCE, United Kingdom, Germany, Poland, European Commission, Afghanistan, Kazakhstan, ChinaGovernment, MilitaryEspionageRU50554
ZIRCONIUM, JUDGMENT PANDA, BRONZE VINEWOOD, Red keres, Violet Typhoon, TA412, ZirconiumCN422
Snake, VENOMOUS Bear, Group 88, Waterbug, WRAITH, Uroburos, Pfinet, TAG_0530, KRYPTON, Hippo Team, Pacifier APT, Popeye, SIG23, IRON HUNTER, MAKERSMARK, ATK13, G0010, ITG12, Blue Python, SUMMIT, UNC4210, Secret Blizzard, UAC-0144, UAC-0024, UAC-0003Russian FederationFrance, Romania, Kazakhstan, Poland, Tajikistan, Russia, United States, Saudi Arabia, Germany, India, Belarus, Netherlands, Iran, Uzbekistan, IraqGovernment, MilitaryEspionageRU50363
TEMP.Periscope, TEMP.Jumper, Leviathan, BRONZE MOHAWK, GADOLINIUM, KRYPTONITE PANDA, G0065, ATK29, TA423, Red Ladon, ITG09, MUDCARP, ISLANDDREAMS, Gingham TyphoonChinaUnited States, Hong Kong, The Philippines, Asia Pacific Economic Cooperation, Cambodia, Belgium, Germany, Philippines, Malaysia, Norway, Saudi Arabia, Switzerland, United KingdomGovernment, Private sectorEspionageCN50363
Twisted Kitten, Cobalt Gypsy, Crambus, Helix Kitten, APT 34, APT34, IRN2, ATK40, G0049, Evasive Serpens, Hazel Sandstorm, EUROPIUM, TA452, Earth SimnavazIran (Islamic Republic of)Israel, Kuwait, United States, Turkey, Saudi Arabia, Qatar, Lebanon, Middle EastGovernment, Private sector, Civil societyEspionageIR503514
G0096, TA415, Blackfly, Grayfly, LEAD, BARIUM, WICKED SPIDER, WICKED PANDA, BRONZE ATLAS, BRONZE EXPORT, Red Kelpie, G0044, Earth Baku, Amoeba, HOODOO, Brass Typhoon, Winnti, Double Dragon, TG-2633, Leopard TyphoonPeople's Republic of ChinaChina, France, Hong Kong, India, Italy, Japan, Myanmar, Netherlands, Singapore, South Korea, South Africa, Switzerland, Thailand, Turkey, United Kingdom, United StatesAutomotive, Business, Services, Cryptocurrency, Education, Energy, Financial, Healthcare, High-Tech, Intergovernmental, Media and Entertainment, Pharmaceuticals, Private sector, Retail, Telecommunications, TravelCN326
CARBON SPIDER, GOLD NIAGARA, Calcium, ATK32, G0046, G0008, Coreid, Carbanak, Sangria Tempest, ELBRUS, Carbon Spider, JokerStashFinancial TheftRU50313
DEEP PANDA, Codoso, WebMasters, KungFu Kittens, Black Vine, TEMP.Avengers, Group 13, PinkPanther, Shell Crew, BRONZE FIRESTONE, G0009, G0073, Pupa, Sunshop Group, Checkered TyphoonChinaUnited StatesPrivate sector, MilitaryEspionageCN50292
COLDRIVER, SEABORGIUM, TA446, GOSSAMER BEAR, BlueCharlie, Star Blizzard, TAG-53, IRON FRONTIER, UNC4057, Blue CallistoRU280
ATK233, G0125, Operation Exchange Marauder, Red Dev 13, Silk Typhoon, MURKY PANDACN100252
Quedagh, VOODOO BEAR, TEMP.Noble, IRON VIKING, G0034, ELECTRUM, TeleBots, IRIDIUM, Blue Echidna, FROZENBARENTS, UAC-0113, Seashell Blizzard, UAC-0082, APT44Russian FederationRussia, Lithuania, Kyrgyzstan, Israel, Ukraine, Belarus, Kazakhstan, Georgia, Poland, Azerbaijan, IranPrivate sector, GovernmentEspionageRU50247
GreedyTaotie, TG-3390, EMISSARY PANDA, TEMP.Hippo, Red Phoenix, Budworm, Group 35, ZipToken, Iron Tiger, BRONZE UNION, Lucky Mouse, G0027, Iron Taurus, Earth Smilodon, Circle Typhoon, Linen TyphoonUnknownUnited States, United Kingdom, France, Japan, Taiwan, India, Canada, China, Thailand, Israel, Australia, Republic of Korea, Russia, Iran, TurkeyGovernment, Private sectorEspionageCN50221
Newscaster, Parastoo, iKittens, Group 83, NewsBeef, G0058, CharmingCypress, Mint SandstormIran (Islamic Republic of)U.S. government/defense sector websites, Saudi Arabia, Israel, Iraq, United KingdomGovernment, MilitaryEspionageIR502111
ACTINIUM, DEV-0157, Blue Otso, BlueAlpha, G0047, IRON TILDEN, PRIMITIVE BEAR, Shuckworm, Trident Ursa, UAC-0010, Winterflounder, Aqua Blizzard, ActiniumUkraine, GermanyGovernmentRU212
Clean Ursa, Cloud Atlas, OXYGEN, G0100, ATK116, Blue OdinRussian FederationAfghanistan, Armenia, Azerbaijan, Belarus, Belgium, Czech Republic, Greece, India, Iran, Italy, Kazakhstan, Kenya, Malaysia, Russia, South Africa, Suriname, Turkmenistan, Ukraine, United Kingdom, United States, VietnamGovernment, Private sectorEspionageRU50210
STONE PANDA, Menupass Team, happyyongzi, POTASSIUM, Red Apollo, CVNX, HOGFISH, Cloud Hopper, BRONZE RIVERSIDE, ATK41, G0045, Granite Taurus, TA429, Cicada, Purple TyphoonChinaJapan, India, South Africa, South Korea, Sweden, United States, Canada, Australia, France, Finland, United Kingdom, Brazil, Thailand, Switzerland, NorwayPrivate sector, GovernmentEspionageCN50201
Velvet Chollima, Black Banshee, Thallium, Operation Stolen Pencil, G0086, APT43, Emerald Sleet, THALLIUM, Springtail, Sparkling PiscesKorea (Democratic People's Republic of)Ministry of Unification, Sejong Institute, Korea Institute for Defense Analyses, GermanyGovernment, Private sectorEspionageKP501923
SectorJ04, SectorJ04 Group, GRACEFUL SPIDER, GOLD TAHOE, Dudear, G0092, ATK103, Hive0065, CHIMBORAZO, Spandex TempestAustralia, Canada, Czech Republic, Germany, Hungary, India, Japan, Romania, Serbia, Singapore, South Korea, Spain, Thailand, Turkey, United Kingdom, United StatesEducation, Finance, Health, Retail, HospitalityRU193
BERSERK BEAR, ALLANITE, CASTLE, DYMALLOY, TG-4192, Dragonfly, Crouching Yeti, Group 24, Havex, Koala Team, IRON LIBERTY, G0035, ATK6, ITG15, BROMINE, Blue Kraken, Ghost BlizzardRussian FederationUnited States, Germany, Turkey, China, Spain, France, Ireland, Japan, Italy, PolandPrivate sector, GovernmentEspionageRU75182
Cobalt Group, Cobalt Gang, GOLD KINGSWOOD, COBALT SPIDER, G0080, Mule Libra170
CHROMIUM, ControlX, TAG-22, FISHMONGER, BRONZE UNIVERSITY, AQUATIC PANDA, Red Dev 10, RedHotel, Charcoal Typhoon, BountyGlad, Red ScyllaAustralia, China, France, Germany, Hong Kong, Japan, Mongolia, Nepal, Nigeria, Philippines, Taiwan, Thailand, United Arab Emirates, United States, VietnamGambling companies, Government Institutions, Education, Media and Entertainment, Pro-democracy and human rights political organizations, Telecommunications, Religious organization, Cryptocurrency, Medical, Covid-19 research organizationsCN179
TEMP.MixMaster, GOLD BLACKBURN, FIN12, Periwinkle Tempest, DEV-0193, Storm-0193, Trickbot LLC, UNC2053, Pistachio Tempest, DEV-0237, Storm-0230Russian FederationAustralia, Bahamas, Canada, Costa Rica, France, Germany, India, Ireland, Italy, Japan, Mexico, New Zealand, Spain, Switzerland, Taiwan, United Kingdom, Ukraine, United StatesDefense, Financial, Government, Healthcare, TelecommunicationsRU162
Storm-1811, CURLY SPIDER, STAC5777, Cardinal160
TEMP.Zagros, Static Kitten, Seedworm, MERCURY, COBALT ULSTER, G0069, ATK51, Boggy Serpens, Mango Sandstorm, TA450, Earth VetalaIran (Islamic Republic of)Saudi Arabia, Georgia, Turkey, Iraq, Israel, India, United Arab Emirates, Pakistan, United StatesGovernmentEspionageIR50162
BRONZE PRESIDENT, HoneyMyte, Red Lich, TEMP.HEX, BASIN, Earth Preta, TA416, Stately Taurus, LuminousMoth, Polaris, TANTALUM, Twill TyphoonChinaUnited States, GermanyCivil societyEspionageCN50160
Operation Cleaver, Op Cleaver, Tarh Andishan, Alibaba, TG-2889, Cobalt Gypsy, G0003Iran (Islamic Republic of)Canada, France, Israel, Mexico, Saudi Arabia, China, Germany, United States, Pakistan, South Korea, United Kingdom, India, Kuwait, Qatar, TurkeyPrivate sector, GovernmentEspionageIR501510
SLIME57CN150
APT 37, Group 123, Group123, InkySquid, Operation Daybreak, Operation Erebus, Reaper Group, Reaper, Red Eyes, Ricochet Chollima, ScarCruft, Venus 121, ATK4, G0067, Moldy Pisces, APT-C-28Korea (Democratic People's Republic of)Republic of Korea, Japan, VietnamGovernment, Private sectorKP50153
Gaza Hackers Team, Gaza cybergang, Gaza Cybergang, Operation Molerats, Extreme Jackal, Moonlight, ALUMINUM SARATOGA, G0021, BLACKSTEMPalestineUnited States, Israel, Palestine, Middle East, EuropeGovernment, Defense, Energy, Finance, Healthcare, Pharmaceuticals, Education, Media, NGOs, Civil Society, Legal, MilitaryEspionagePS151
C-Major, Transparent Tribe, Mythic Leopard, ProjectM, APT36, APT 36, TMP.Lapis, Green Havildar, COPPER FIELDSTONE, Earth Karkaddan, Storm-0156PakistanCivil society, Military, GovernmentPK50152
COSMIC WOLF, Marbled Dust, SILICON, Teal Kurma, UNC1326GermanyTR151
VIXEN PANDA, Ke3Chang, Playful Dragon, Metushy, Lurid, Social Network Team, Royal APT, BRONZE PALACE, BRONZE DAVENPORT, BRONZE IDLEWOOD, NICKEL, G0004, Red Vulture, Nylon Typhoon, MirageChinaEuropean Union, India, United Kingdom, GermanyGovernmentEspionageCN50141
Nian, BRONZE BUTLER, REDBALDKNIGHT, STALKER PANDA, G0060, Stalker Taurus, PLA Unit 61419, Swirl TyphoonChinaJapan, China, Korea (Republic of), Russian FederationPrivate sectorEspionageCN50131
OceanLotus Group, Ocean Lotus, OceanLotus, Cobalt Kitty, APT-C-00, SeaLotus, Sea Lotus, APT-32, APT 32, Ocean Buffalo, POND LOACH, TIN WOODLAWN, BISMUTH, ATK17, G0050, Canvas CycloneVietnamChina, Germany, United States, Vietnam, Philippines, Association of Southeast Asian NationsGovernment, Private sector, Civil societyEspionageVN50134
PIRATE PANDA, KeyBoy, Tropic Trooper, BRONZE HOBART, G0081, Red Orthrus, Earth CentaurCN50130
COMMENT PANDA, PLA Unit 61398, Comment Crew, Byzantine Candor, Group 3, TG-8223, Comment Group, Brown Fox, GIF89a, ShadyRAT, G0006ChinaUnited States, Taiwan, Israel, Norway, United Arab Emirates, United Kingdom, Singapore, India, Belgium, South Africa, Switzerland, Canada, France, Luxembourg, JapanPrivate sector, GovernmentEspionageCN50131
Chinastrats, Patchwork, Monsoon, Sarit, Dropping Elephant, APT-C-09, ZINC EMERSON, ATK11, G0040, Orange Athos, Thirsty GeminiIndiaBangladesh, Sri Lanka, PakistanPrivate sector, MilitaryEspionageIN50133
Spring Dragon, ST Group, DRAGONFISH, BRONZE ELGIN, ATK1, G0030, Red Salamander, Lotus BLossom, Billbug, Lotus BlossomChinaJapan, Philippines, Hong Kong, Indonesia, Taiwan, VietnamMilitary, GovernmentEspionageCN50132
Group 8, AURORA PANDA, Hidden Lynx, Tailgater Team, Dogfish, BRONZE KEYSTONE, G0025, Group 72, G0001, Axiom, HELIUM, Heart TyphoonChinaUnited States, Netherlands, Italy, Japan, United Kingdom, Belgium, Russia, Indonesia, Germany, Switzerland, ChinaGovernment, Private sector, Civil societyEspionageCN50133
UNC2589, TA471, UAC-0056, Nascent Ursa, Nodaria, FROZENVISTA, Storm-0587, DEV-0587, Saint Bear, Lorec53, EMBER BEAR, Lorec Bear, Bleeding Bear, Cadet BlizzardRU130
Newscaster Team, Magic Hound, G0059, Phosphorus, Mint Sandstorm, TunnelVision, COBALT MIRAGE, Agent SerpensIR50122
SixLittleMonkeysBelarus, Russia, Mongolia, UkraineCN120
Moafee, BRONZE OVERBROOK, G0017, G0002, Shallow TaurusChinaUnited StatesPrivate sectorEspionageCN50122
PLA Unit 78020, OVERRIDE PANDA, Camerashy, BRONZE GENEVA, G0019, Naikon, BRONZE STERLING, G0013ChinaIndia, Saudi Arabia, Vietnam, Myanmar, Singapore, Thailand, Malaysia, Cambodia, China, Philippines, South Korea, United States, Indonesia, LaosGovernment, Private sectorEspionageCN50123
Group 100, COZY BEAR, The Dukes, Minidionis, SeaDuke, YTTRIUM, IRON HEMLOCK, Grizzly Steppe, G0016, ATK7, Cloaked Ursa, TA421, Blue Kitsune, ITG11, BlueBravo, Nobelium, UAC-0029Russian FederationUnited States, China, New Zealand, Ukraine, Romania, Georgia, Japan, South Korea, Belgium, Kazakhstan, Brazil, Mexico, Turkey, Portugal, India, GermanyGovernment, Private sectorEspionageRU50126
OPERATION HANGOVER, Donot Team, APT-C-35, SectorE02, Orange KalaGermanyIN50121
CactusPete, KARMA PANDA, BRONZE HUNTLEY, COPPER, Red Beifang, G0131, PLA Unit 65017, Earth Akhlut, TAG-74ChinaEastern Europe, Japan, South Korea, Taiwan, USMilitary, Government, Private sectorCN50110
DUBNIUM, Fallout Team, Karba, Luder, Nemim, Nemin, Tapaoux, Pioneer, Shadow Crane, APT-C-06, SIG25, TUNGSTEN BRIDGE, T-APT-02, G0012, ATK52, Zigzag HailKorea (Republic of)Japan, Russia, Taiwan, South Korea, ChinaPrivate sectorEspionageKR50113
DarkHalo, StellarParticle, NOBELIUM, Solar Phoenix, Midnight BlizzardRU100116
Desert Falcon, Arid Viper, APT-C-23, Bearded Barbie, Two-tailed ScorpionPalestineUnited States, Israel, Palestine, Middle East, EuropeGovernment, Defense, Energy, Finance, Education, High-Tech, Telecoms, Transportation, Media, NGOs, Civil Society, Legal, MilitaryEspionagePS110
APT 33, Elfin, MAGNALLIUM, Refined Kitten, HOLMIUM, COBALT TRINITY, G0064, ATK35, Peach Sandstorm, TA451Iran (Islamic Republic of)United States, Saudi Arabia, South KoreaPrivate sectorEspionageIR50114
CIRCUIT PANDA, Temp.Overboard, HUAPI, Palmerworm, G0098, T-APT-03, Manga Taurus, Red Djinn, Earth Hundun, Canary TyphoonCN110
COBALT DICKENS, Mabna Institute, TA407, TA4900, Yellow NabuIR110
The ShadowBrokers, TSB, Shadow Brokers, ShadowBrokers110
SLIME34, DEV-0401, Cinnamon Tempest, Emperor DragonflyCN101
WANDERING SPIDER, White Dev 115, Dark Scorpius100
Operation Mermaid, Prince of Persia, FoudreIran (Islamic Republic of)Israel, Iran, France, China, Sweden, United States, United Kingdom, Germany, Syria, Italy, Denmark, Canada, Russia, Saudi Arabia, BahrainGovernment, Private sectorEspionageIR50100
Maze Team, TWISTED SPIDER, GOLD VILLAGE, Storm-0216, DEV-0216, UNC2198, TUNNEL SPIDERRU100
Colourful Panda, BRONZE DUDLEYCN100
GamblingPuppetChina, United States, Hong Kong, Malaysia, TaiwanGambling Websites, Information technology, Electronics Manufacturers, EducationCN100
Adept Libra100
Chafer, REMIX KITTEN, COBALT HICKMAN, G0087, Radio Serpens, TA454, ITG07, Burgundy SandstormIR50100
UNC1151, TA445, PUSHCHA, Storm-0257, DEV-0257, UAC-0057BelarusGermany, Latvia, Lithuania, Poland, UkraineGovernmentBY50101
100
PIONEER KITTEN, PARISITE, UNC757, Lemon Sandstorm, RUBIDIUMIR91
DeathStalker, TA4563, EvilNum, Jointworm, KNOCKOUT SPIDER90
SideWinder, Rattlesnake, APT-C-17, T-APT-04IndiaChina, Pakistan, Nepal, AfghanistanGovernment, Military, Private SectorIN92
TEMP.Beanie, Operation Woolen Goldfish, Operation Woolen-Goldfish, Thamar Reservoir, TimberwormIran (Islamic Republic of)Saudi Arabia, Venezuela, Afghanistan, United Arab Emirates, Iran, Israel, Iraq, Kuwait, Turkey, Canada, Yemen, United Kingdom, Egypt, Syria, JordanGovernment, MilitaryEspionageIR5099
8220 GangCN80
UNC5221, Red Dev 61GermanyCN83
Storm-0978, UAT-5647GermanyRU80
Ransomed.vc80
UAC-0114, TA473, TAG-70, TA-473GermanyRU80
SKELETON SPIDER, ITG08, MageCart Group 6, White Giant, GOLD FRANKLIN, ATK88, G0037, Camouflage Tempest, TA4557, Storm-053883
FamousSparrow, UNC2286, Salt Typhoon, RedMike, OPERATOR PANDACN81
ChinaUnited States, GermanyGovernmentEspionageCN5080
HAMMER PANDA, TEMP.Zhenbao, NetTravelerChinaMongolia, Kazakhstan, Tajikistan, Germany, United Kingdom, India, Kyrgyzstan, South Korea, United States, Chile, Russia, China, Spain, Canada, MoroccoGovernment, MilitaryEspionageCN5080
AMERICIUM, BlackShadow, DEV-0022, Agrius, Agonizing Serpens, UNC2428, Black Shadow, SPECTRAL KITTENIR70
Tilded Team, EQGRP, G0020United StatesIran, Afghanistan, Syria, Yemen, Kenya, Russia, India, Mali, Algeria, United Kingdom, Pakistan, China, Lebanon, United Arab Emirates, LibyaGovernment, MilitaryEspionageUS5077
LazyMeerkat, G0079, Obscure Serpens70
Slayer Kitten, G0052Iran (Islamic Republic of)Israel, Jordan, Saudi Arabia, Germany, United StatesGovernment, Private sector, Civil societyEspionageIR5071
Butterfly, Morpho, Sphinx Moth70
PITTY PANDA, G0011, Temp.PittytigerCN5071
Animal Farm, Snowglobe, ATK8FranceSyria, United States, Netherlands, Russia, Spain, Iran, China, Germany, Algeria, Norway, Malaysia, Turkey, United Kingdom, Ivory Coast, GreeceGovernment, Private sectorEspionageFR5070
70
RU5070
Blind EagleEcuador, Colombia, Spain, Panama, ChilePetroleum, Manufacturing, Financial, Private sector, GovernmentEspionage70
G0039, Suckfly, BRONZE OLIVE, Group 46CN5071
GOLD ESSEX, TA544, Storm-030270
70
WebsiicAfghanistan, India, Indonesia, Iran, Kyrgyzstan, Malaysia, Pakistan, Russia, Slovakia, Taiwan, Thailand, United Kingdom, Uzbekistan, VietnamMilitary, Government60
Machete, machete-apt, APT-C-43, G0095UnknownVenezuela, Russia, Cuba, China, Belgium, Ecuador, Brazil, Spain, Germany, France, Colombia, Peru, Sweden, United States, MalaysiaMilitary, GovernmentEspionage5061
ATK113, G006161
IMPERIAL KITTEN, Yellow Liderc, Imperial Kitten, TA456, DUSTYCAVE, Crimson Sandstorm, Cuboid Sandstorm, Smoke SandstormIran (Islamic Republic of)United States, Israel, Middle East, EuropeDefense, Government, Military, Finance, Energy, Healthcare, Pharmaceuticals, Telecoms, High-Tech, Media, NGOs, Civil Society, Legal, Rail, TransportationEspionageIR5061
COBALT LYCEUM, HEXANE, UNC1530, Spirlin, MYSTICDOME, siamesekitten, Chrono Kitten, Storm-0133Iran (Islamic Republic of)Israel, Middle EastGovernment, Energy, High-Tech, Telecomms, Education, Military, DefenseEspionageIR5060
IQ60
TeamSpy, Team Bear, Anger Bear, IRON LYRICRussian FederationHungary, BelarusGovernment, Private sectorEspionageRU5061
CN60
LuoYuCN60
MY60
PK60
NIGHTSHADE PANDA, Red Pegasus, Group 27United StatesPharmaceuticals, Healthcare, Construction, Aerospace, Defense industrial baseCN60
IceFog, Trident, RedFoxtrot, Red Wendigo, PLA Unit 69010ChinaSouth Korea, United States, Japan, Germany, ChinaGovernment, MilitaryEspionageCN5060
Iran (Islamic Republic of)Iran, Pakistan, Israel, United StatesGovernment, Private sectorEspionageIR5060
GOLD LOWELL60
COBALT EDGEWATER60
PLA Navy, MAVERICK PANDA, BRONZE EDISON, SODIUM, Salmon TyphoonChinaUnited States, United Kingdom, Hong KongPrivate sector, MilitaryEspionageCN5060
Lebanese Cedar, DeftToreroLB61
60
GOTHIC PANDA, TG-0110, Group 6, UPS, Buckeye, Boyusec, BORON, BRONZE MAYFAIR, Red Sylvan, Brocade TyphoonChinaUnited States, United Kingdom, Hong KongPrivate sectorEspionageCN5061
KEYHOLE PANDA, MANGANESE, BRONZE FLEETWOOD, TEMP.Bottle, Mulberry Typhoon, Poisoned FlightCN61
SOURGUM, Candiru60
60
UAC-0109RU60
50
SVCMONDR, G0023ChinaJapan, TaiwanPrivate sectorEspionageCN5050
NUMBERED PANDA, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, IXESHE, BRONZE GLOBE, Hexagon TyphoonChinaTaiwan, JapanPrivate sector, GovernmentEspionageCN5051
50
South Korea, Japan50
50
GOLD DRAKE50
Earth KashaCN50
Red Dev 4, Alloy Taurus, Granite Typhoon, PHANTOM PANDACN53
50
Germany50
IR50
Gorgon Group, Subaat, ATK92, G0078, Pasty Gemini50
BY50
50
G0076, ATK78UnknownUnited StatesPrivate sectorEspionage5050
Emennet Pasargad, Holy Souls, MARNANBRIDGE, NEPTUNIUM, HAYWIRE KITTENIran (Islamic Republic of)United States, Israel, Middle East, EuropeGovernment, Finance, High-Tech, Telecoms, NGOs, Civil Society, Rail, EnergyInformation OperationsIR5050
Xenotime, G0088, ATK9150
50
OSMIUM, Konni, VedaliaKP51
VIOLIN PANDA, TH3Bug, Crawling TaurusCN5050
DEV-0530, H0lyGh0stKP50
Akira, PUNK SPIDER, GOLD SAHARA50
PLA Unit 61486, PUTTER PANDA, MSUpdater, 4HCrew, SULPHUR, SearchFire, TG-6952, G0024ChinaU.S. satellite and aerospace sectorPrivate sector, GovernmentEspionageCN5051
TA542, GOLD CRESTWOOD50
FIN4, G0085RO5050
50
Conimes, CycldekChinaMalaysia, India, Indonesia, Japan, Philippines, Southeast Asia, South Korea, VietnamPrivate SectorCN7550
Strider, Sauron, Project Sauron, G0041United StatesRussia, Iran, Belgium, China, Sweden, RwandaGovernment, MilitaryEspionageUS5052
Ruinous Ursa, Cadet BlizzardUkraineSabotageRU51
UNC302United States, Australia, Belgium, Germany, Japan, Lithuania, Netherlands, Spain, South Korea, Sweden, United KingdomInformation technology, Medical, Civil engineering, Business, Education, Gaming, Energy, Pharmaceuticals, Defense industrial baseCN50
Lamberts, the Lamberts, APT-C-39, PLATINUM TERMINALUnited StatesGlobalPrivate sector, GovernmentEspionageUS5051
50
Brazil, Central African Republic, Georgia, Kazakhstan, Moldova, Russia, Spain, Sudan, Taiwan, Ukraine, United Kingdom, United States50
Sharp DragonGermanyCN50
Network Battalion 6550
Bitter, T-APT-17, APT-C-08, Orange Yali, TA397GermanyIN50
MAN1, TA51142
40
TA413, White Dev 940
G0015, Earth Aughisky40
DEV-0450RU42
43
40
Hive0118RU47
DEV-0832, Vice Society41
46
GOLD MELODY, UNC96142
Aggah, TH-15741
BRONZE SILHOUETTE, VANGUARD PANDA, UNC3236, Insidious Taurus, VOLTZITE, Dev-0391, Storm-0391CN40
SnakeCharmer40
CN40
40
UNC3944, Muddled Libra, Oktapus, Scattered Swine, Scatter Swine, Octo Tempest, 0ktapus, Storm-0971, DEV-0971, Starfraud40
DEV-0829, Nwgen Team40
UNC2849KZ40
40
Evasive Panda, DaggerflyHong Kong, Malaysia, India, Taiwan, Macao, NigeriaCN40
Aged Libra40
Red Dev 18, Earth BluecrowMiddle East, AsiaGovernment, Education, LogisticsCN40
40
40
40
40
狼毒草North Korea, South Korea, Japan, China, Mongolia, Egypt, Saudi Arabia, Yemen, Oman, Iran, Iraq, Kuwait, Israel, Jordan, Gaza, Syria, Turkey, LebanonGovernment, Electronics Manufacturers, Universities, Religious organization40
TG2003, Elephant BeetleRU40
CN40
Moses Staff, Marigold Sandstorm, DEV-0500, VENGEFUL KITTENIR41
DYNAMITE PANDA, TG-0416, SCANDIUM, PLA Navy, Wekby, G0026, Satin TyphoonChinaUnited StatesGovernment, Private sector, Civil societyEspionageCN5042
40
40
G0029, Golfing TaurusCN5041
Jade Sleet, UNC4899, PukchongKP41
40
RU40
PS40
CN5040
ES40
Money Libra40
CN40
RU40
ChinaChina, Hong Kong, Kazakhstan, Taiwan, PhilippinesPrivate Sector, Gambling companies, Gaming, Information technology, Telecommunications, Government, Transportation systems, DissidentCN7540
40
GOLD SWATHMORE40
40
40
40
Admin338, Team338, MAGNESIUM, admin@338, G0018ChinaHong Kong, United StatesGovernment, Private sector, Civil societyEspionageCN5041
Superman, BRONZE WALKERChinaMyanmar, Germany, Singapore, Canada, India, United States, South KoreaGovernment, Private sectorEspionageCN5040
DeepCliff, Red Dev 340
UA40
40
Bouncing Golf, APT-C-50IR40
Rancor group, Rancor, Rancor Group, G0075, Rancor TaurusChinaSingapore, CambodiaGovernment, Civil societyEspionageCN5040
CN40
IR5042
40
FruityArmor, G0038United Arab EmiratesUnited Arab Emirates, United KingdomCivil societyEspionageAE5041
Duqu GroupIsraelIran, SudanMilitary, Government, Private sectorEspionageIL5040
SN BlackmetaPS40
Famous Chollima, UNC5267, Wagemole, Nickel Tapestry, Storm-1877, Void DokkaebiKP40
UAC-0100, UAC-0106RU30
TEMP.Warlock, UNC90231
30
30
Vermin, SickSyncRU30
The Mask, Mask, Ugly FaceSpainMorocco, France, Libya, Venezuela, Poland, Brazil, Spain, United States, South Africa, Tunisia, United Kingdom, Switzerland, Iran, GermanyGovernment, Private sectorEspionageES5030
OPERA1ER, NXSMS, DESKTOP-GROUP30
G0054UnknownArgentina, Ecuador, Brazil, Brunei, Peru, MalaysiaGovernmentEspionage5031
30
30
30
Operation Poisoned News30
G0013ChinaUnited States, South Korea, Saudi Arabia, Thailand, Vietnam, Malaysia, IndiaGovernmentEspionageCN5031
CN30
30
30
Spamouflage DragonCN30
TGR-STA-004330
Shakthak, TA551, ATK236, G0127, Monster Libra30
KP30
JerseyMikes, TURBINE PANDA, BRONZE EXPRESS, TECHNETIUM, Taffeta TyphoonCN5032
Hive009130
Space PiratesCN30
RU30
APT49, AgainstTheWest30
BR30
SPRITE SPIDER30
DEV-0322, Circle TyphoonCN30
RU30
LinkC30
KurdistanGovernmentEspionage30
CN30
MA30
BRONZE HIGHLANDChinaHong Kong, India, Malaysia, TaiwanGovernment, Individuals, UniversitiesEspionageCN5030
MY30
StrongPity, G0056TR5032
TAG-100, RedNovemberCN30
30
30
Salted Earth, Sturgeon FisherGermanyKZ30
Karakurt LairCanada, Germany, United Kingdom, United StatesExtortion33
LAPSUS$, DEV-0537, SLIPPY SPIDER, Strawberry Tempest31
Oro0lxy, DarkShadowCN30
Germany30
30
G003131
Genesis Day, Teng SnakeCN30
30
NG30
LookingFrogCN30
APT-Q-95USChinaMilitary, Government, Private SectorEspionageUS2530
NoName057, NoName05716, 05716nnm, Nnm05716Czech Republic, Denmark, Estonia, Lithuania, NATO, Norway, Poland, UkraineFinancial, Government, Military, Telecommunications, TransportationDenial of service30
CN30
DarkUniverse, SIG2730
Hive012730
United States, Czech RepublicGovernmentDenial of service30
30
UNC3742Ukraine, Russia, Kazakhstan, MongoliaGovernment, Military, Logistics, Defense ContractorEspionageCN30
Team Twiizer30
30
Plaid Rain, UNC4453, GREATRIFT, INCENDIARY JACKALLebanonIsraelCritical manufacturing, Defense industrial base, Financial services, Food and agriculture, Government agencies and services, Healthcare, Pharmaceuticals, Information technology, Transportation systems, NGOs, Civil Society, Military, DefenseEspionageLB7531
Indra, Gonjeshke DarandeIranCritical manufacturing, Transportation systemsSabotage30
LeafMiner, Raspite30
TwoForOne, G0068, ATK3332
30
IR30
Nomadic OctopusRU30
PS30
UNC1945, CL-CRI-002530
G0033BR5031
G0070LB5030
30
OilRig, GreenbugUnknownIraq, United Kingdom, Pakistan, IsraelPrivate sectorEspionage50313
IR30
Covert GroveCN5030
VN30
30
Evil Eye, Red Dev 16, Earth Empusa30
DEV-0234CN30
G0014CN5031
IR1031
ANCHOR PANDA, QAZTeam, ALUMINUMChinaUnited States, United Kingdom, Germany, Australia, SwedenGovernment, MilitaryEspionageCN5035
30
UnknownPalestine, United Arab Emirates, Qatar, Somalia, Syria, Canada, Germany, Serbia, Kuwait, Egypt, Saudi Arabia, Chile, Iraq, India, United States, Israel, Russia, South Korea, Jordan, Djibouti, Lebonon, Morocco, Iran, United Kingdom, Afghanistan, Oman, DenmarkGovernment, Civil societyEspionage5030
GoldMouse, Golden RAT, ATK80SY30
30
KNOTWEED, DSIRFAT30
IR30
Windy Phoenix30
SNEAKY PANDA, Elderwood, Elderwood Gang, SIG22, G0066ChinaUnited States, Canada, United Kingdom, Switzerland, Hong Kong, Australia, India, Taiwan, China, DenmarkPrivate sector, Civil societyEspionageCN5031
BRONZE WOODLAND, Rotten Tomato30
G006330
Snooping Dragon30
Storm-1837, Flying YetiRU30
30
Budminer cyberespionage groupCN30
CN30
Outrider TigerGermany31
30
PoisonVine, APT-Q-20TW30
Silence, WHISPER SPIDER30
FRwL, FromRussiaWithLove30
Empire Monkey, CobaltGoblin30
UCAUA31
30
SaffronRose, Saffron Rose, AjaxSecurityTeam, Ajax Security Team, Group 26, SayadIran (Islamic Republic of)United States, Iranian internet activistsMilitary, Civil societyEspionageIR5039
20
SkidSec Leaks20
Core Werewolf20
PS20
CL-STA-0049CN20
20
20
LAUNDRY BEARRU20
20
Uteus20
IT20
20
Silent Ransom, TG272920
DEV-129520
20
KP20
20
20
LandUpdate80820
20
CN20
CN20
20
IR20
Piwiks20
20
Cyber Anarchy SquadUA20
20
20
20
20
20
21
20
20
Ghost Security20
20
Bad Magic20
IL20
DEV-1084IR20
Personal Panda20
BlueTravellerCN20
20
DUNE, Storm-0842, Red SandstormIran (Islamic Republic of)United States, Israel, Middle East, EuropeGovernment, Healthcare, Pharmaceuticals, High-Tech, Telecomms, Education, Media, NGOs, Civil SocietyEspionage, Information Operations, SabotageIR5020
CN20
20
IR20
20
DEV-0665RU20
CN20
20
CN20
20
20
CN20
DEV-0343IR20
20
20
20
20
DEV-024920
RU20
CN20
20
CN20
KP20
Sticky WerewolfRU20
CN20
20
20
20
CN20
20
PS20
20
EncryptHub20
20
VulzSecID20
20
20
20
20
DEV-050421
CN20
20
RU20
Russian Angry Hackers Did ItRU20
20
CN20
DEV-0206, Purple Vallhund21
UA21
DEV-0196, QuaDreamIL20
Black CubeIL20
20
20
20
CN20
IN20
20
20
20
IL20
PS20
20
20
APT-Q-5820
Ethereal Panda, Storm-0919CN20
IR20
VN20
CN20
Tropical ScorpiusUkraine, European Union22
badbullzvenom, badbullz20
G005120
G004320
G007220
G004820
20
20
BRONZE MEDLEY20
Golden Falcon20
Sapphire Mushroom, Blue Mushroom, NuclearCrisisPrivate sector, Government, Military, Scientific Research, FinanceEspionage20
UkraineGovernmentEspionage20
20
GOLD HERON20
20
20
20
Korea (Republic of)China, North Korea, Japan, Nepal, Singapore, Russia, Poland, SwitzerlandGovernmentKR20
Hive0081 (IBM), SectorD01 (NHSC), xHunt campaign (Palo Alto), Hunter Serpens20
20
20
GOLD LAGOON20
20
20
20
20
CYBORG SPIDERHealthcare22
20
G005320
Topgear, Comnie, BLACKGEARCN20
20
20
ChinaMalaysia, Indonesia, Philippines, United States, IndiaGovernmentEspionageCN5020
ITsecTeamIran (Islamic Republic of)United States, Bank of America, US Bancorp, Fifth Third Bank, Citigroup, PNC, BB&T, Wells Fargo, Capital One, HSBC, AT&T, NYSEDenial of serviceIR5020
Group 42, VOYEURIR5020
OperationTroy, Guardian of Peace, GOP, WHOis Team, Andariel, Subgroup: Andariel, Onyx Sleet, PLUTONIUMKP5020
G0036RU5021
G005522
IR5020
Cloudy Omega, EmdiviUnknownJapanGovernment, Private sectorEspionageCN5020
G0062CN5021
UnknownSouth KoreaGovernment, Private sectorEspionageKP5020
Islamic State Hacking Division, CCA, United Cyber Caliphate, UUC, CyberCaliphate20
Fraternal JackalIR5020
Skipper TurlaRussian FederationUnited States, South Korea, United Kingdom, UzbekistanGovernment, Private sectorEspionageRU5020
20
20
Palmetto Fusion, Allanite21
20
PakistanPakistan, Iraq, Australia, Afghanistan, United Arab Emirates, Germany, India, United StatesGovernment, Civil societyEspionagePK5020
IAmTheKing20
20
21
Operation EvilTraffic20
21
GOLD ULRICK20
20
20
20
China, France, Germany, India, Japan, North America, Russia, South Africa, South Korea, United KingdomGovernment, Journalists, NGOsKP21
UNC94Australia, Cambodia, Hong Kong, Singapore, VietnamGovernment, Education, TelecommunicationsCN20
DEV-041320
APT-Q-1220
AustraliaGovernmentEspionage20
Russia, Ukraine, United StatesEspionageCN20
Red HariasaKyrgyzstan, Malaysia, VietnamCN20
Denmark, SwedenDenial of service20
Mimo20
BazzarCall, BazaCall20
21
20
ChinaAviation, Automotive, Education, Intergovernmental, Media and Entertainment, Information Technology, Religious OrganizationsFinancial Theft, EspionageCN25
DEV-0324, Sagrid, TA54321
UNC788, CALANQUEIran (Islamic Republic of)Australia, Europe, Israel, Middle East, USEducation, Government, Military, Defense, Energy, Finance, Healthcare, Pharmaceuticals, Civil Society, Legal, Manufacturing, Media, NGOs, PharmaceuticalsEspionageIR5022
CamoFeiIndia, Japan, Nepal, Russia, Taiwan, USAviation, Energy22
IndiaHigh-Tech, Military, EnergyCN20
IR23
CN5010
KP10
CN5010
CN10
10
10
10
10
10
RU5010
CN10
KP10
RU10
CorporacaoXRat, CorporationXRat10
10
10
10
10
10
IR5010
Anonymous 64TW10
CN5010
CN10
IR10
10
10
11
RU11
10
CN10
10
111
UA5010
NG5010
10
10
CN5010
CN10
10
10
1.php GroupCN5010
Silver Fox10
10
Nemesis Kitten, Storm-0270IR11
CN5010
10
CN5010
10
10
RU10
10
10
ChinaSouth Korea, JapanGovernment, Private sectorCN5010
ALPHV Ransomware Group11
CN10
CN10
10
RU5010
10
RU10
KP5010
10
KP10
10
10
CN5010
CN5010
10
CN5010
10
10
Financial Theft15
10
10
Group 41IR50110
10
116
10
12
10
10
Hive014510
ChinaTaiwan, United States, Vietnam, Solomon IslandsBiomedical, Government, Information technologyCN5010
CN10
IR10
RU10
CN10
10
CN5010
Shiite_Harvest10
10
10
Jabaroot DZDZ10
10
10
PLA Navy, Wisp TeamChinaUnited States, United Kingdom, Hong KongPrivate sector, MilitaryEspionageCN5012
10
11
10
RU10
10
RU10
RU10
Red ChimeraCN5010
10
10
10
10
CN5010
CN5010
RU10
10
CN10
CN5010
CN5010
10
KP10
CN10
CN5010
10
MA10
RU10
RU10
10
CN5010
10
10
ID10
SyrianElectronicArmy, SEASY5010
10
10
CN10
10
IR10
CN10
CN10
RU10
Eraleig10
CN5010
CN10
BY10
10
RU10
ChinaUighursCivil societyEspionageCN5010
CovertNetwork-1658, ORB07CN10
TunisianCyberArmyTN5010
AIZ10
RU5010
CN10
KP10
BelarusEurope, Eastern Europe, South Asia, Northeast AfricaGovernmentEspionageBY5010
10
CN10
10
10
10
CN10
DD4BC, AmbiorxUS5010
10
10
10
10
ChinaEast Asia, Central Asia, Southeast Asia, The Middle East, Southern AfricaGovernment, Energy CompanyEspionageCN5010
UNC422110
10
CN10
CN5010
IR10
10
10
10
KP10
Private sector, GovernmentEspionage10
10
TaiwanSemiconductor IndustryCN10
Hong Kong, TaiwanGovernment, EducationCN10
Private sector10
Storm-056910
Spandex Tempest11
10
CN10
10
10
10
10
10
10
10
10
CN10
10
10
8220 Mining Group10
DEV-0215, LAWRENCIUMKP10
DEV-0228IR10
South America, Asia, European UnionCN10
10
10
10
TA272110
ChinaPrivate SectorCN7510
CN10
10
10
10
10
12
10
Thief Libra10
Prying Libra10
APOTHECARY SPIDER10
SIG3710
Civil Society10
IR10
10
10
Actor21042610
TH-16310
10
10
10
Smoke Sandstorm, BOHRIUM, IMPERIAL KITTENIR11
10
10
CN10
10
TR10
BackDip, CloudComputating, QuarianLibya, Namibia, Sudan, Albania, Croatia, Georgia, Poland, Iran, Qatar, Saudi Arabia, Sri Lanka, UzbekistanGovernment, Telecomms10
10
Matanbuchus10
TaiwanFinancialCN10
10
Lace Tempest10
10
10
APT-C-38 (QiAnXin), SABER LION, TG-2884 (SCWX CTU)10
10
Business Email Compromise10
Espionage10
IR10
10
CN10
10
10
10
10
10
10
10
10
10
10
10
10
IR10
10
10
IT10
Germany10
CN10
10
Manatee TempestRU12
IR10
10
10
CN10
10
10
10
10
10
Golden Chickens, Golden Chickens01, Golden Chickens 0111
PalestineIsraelMilitary, Defense, TransportationEspionagePS5010
10
Retefe Gang, Retefe GroupRU10
10
Vovan, Lexus10
Golden Chickens, Golden Chickens02, Golden Chickens 0211
RedCurl, Red Wolf10
12
CN10
10
UAT435610
10
NG16
Iron Cyber Group10
Russian FederationUkraine, Austria, Russia, Saudi ArabiaPrivate sectorEspionageRU5010
CN10
CN10
11
CN15
CN13
12
Russia10
10
RO10
VN10
ChinaChina, Myanmar, Hong Kong, TaiwanCivil society, GovernmentEspionageCN5010
CN10
KE10
Roaming Mantis Group10
IR10
Operation RestyLink, Enelink10
TA569, UNC154311
10
Ivory Coast, Morocco, Cameroon, Senegal, Togo10
10
Sapphire Sleet11
DEV-110110
10
RU10
10
10
DEV-104410
DEV-1167ID10
RU10
DEV-079610
RADIUMCN11
CERIUMKP11
RU10
Wine Tempest13
DEV-0867EG10
10
DEV-0381RU10
10
Balikbayan Foxes10
10
Nahr Elbard, Nahr el bared10
10
10
10
10
10
10
10
10
Lion Soldiers Team, Phantom TurkDenial of serviceTR5000
CN5000
IR5000
LY5000
00
Shrouded CrossbowCN5000
Turk Hack TeamTR5000
FallagaTeamDefacementTN5000
Storm-011300
VikingdomAE5000
ChinaMiddle East, Southeast Asian, France, Egypt, Sudan, South Sudan, Libya, Turkey, Saudi Arabia, Oman, Yemen, Sri Lanka, India, Pakistan, Iran, Afghanistan, Kuwait, Iraq, United Arab EmiratesGovernment, TelecommunicationsEspionageCN5000
LadyBoyle00
RU5000
RU5000
01
00
Crescent and StarDenial of serviceTR5000
Denial of serviceTR5000
01