Dashboard

Threat Actors

Intel Library

Threat actor profiles

Each profile aggregates every vendor report that names the group, all vendor aliases (who calls it what), the MITRE ATT&CK techniques and IOCs seen in that research, and the timeline of publications. Every claim traces back to the original report.

1,115 shown
G1049KP13 reports
Lazarus Group
Microsoft: Diamond SleetCrowdStrike: Labyrinth ChollimaMandiant: LazarusOSINT: Operation DarkSeoul
Last reported 2026-10-08
G0016RU9 reports
APT29
Microsoft: Midnight BlizzardCrowdStrike: Cozy BearMicrosoft (legacy): NOBELIUMVarious: The Dukes
Last reported 2026-09-17
G0007RU6 reports
APT28
Microsoft: Forest BlizzardCrowdStrike: Fancy BearMicrosoft (legacy): STRONTIUMOSINT: Pawn Storm
Last reported 2026-07-31
G10585 reports
The Gentlemen
OSINT: Storm-2697OSINT: GOLD SHERWOOD
Last reported 2026-07-10
G0010RU4 reports
Turla
Microsoft: WaterbugCrowdStrike: Venomous BearOSINT: SnakeOSINT: Group 88
Last reported 2026-07-03
G10244 reports
Storm-1567
OSINT: AkiraOSINT: PUNK SPIDEROSINT: GOLD SAHARAOSINT: Howling Scorpius
Last reported 2026-10-06
G1014CN3 reports
MUSTANG PANDA
Microsoft: Twill TyphoonSecureworks: Bronze PresidentOSINT: HoneyMyteOSINT: Red Lich
Last reported 2026-08-14
G0050VN2 reports
APT32
OSINT: OceanLotus GroupOSINT: Ocean LotusOSINT: OceanLotusOSINT: Cobalt Kitty
Last reported 2026-06-11
G0069IR2 reports
MuddyWater
Microsoft: Storm-1086CrowdStrike: Static KittenOSINT: TEMP.ZagrosOSINT: Seedworm
Last reported 2026-03-16
G0004CN2 reports
APT15
OSINT: VIXEN PANDAOSINT: Ke3ChangOSINT: Playful DragonOSINT: Metushy
Last reported 2026-09-01
G10572 reports
ShinyHunters
OSINT: UNC6240OSINT: Bling Libra
Last reported 2026-09-25
G10562 reports
TeamPCP
OSINT: Altered SpiderOSINT: PCPcatOSINT: ShellForceOSINT: DeadCatx3
Last reported 2026-03-31
G0143CN2 reports
Earth Lusca
OSINT: CHROMIUMOSINT: ControlXOSINT: TAG-22OSINT: FISHMONGER
Last reported 2026-06-29
G10402 reports
Play
single-name attribution
Last reported 2026-09-02
G0100RU2 reports
Inception Framework
OSINT: Clean UrsaOSINT: Cloud AtlasOSINT: OXYGENOSINT: G0100
Last reported 2026-05-22
Threat actor2 reports
Armored Likho
OSINT: Eagle Werewolf
Last reported 2026-08-13
Threat actor2 reports
UNC6619
OSINT: TGR-STA-1030OSINT: Shadow Campaigns
Last reported 2026-04-24
Threat actor2 reports
Void Arachne
OSINT: Silver Fox
Last reported 2026-04-30
G0094KP1 report
Kimsuky
Microsoft: Emerald SleetCrowdStrike: Velvet ChollimaOSINT: Black BansheeOSINT: Thallium
Last reported 2026-05-14
G0034RU1 report
Sandworm
Microsoft: Seashell BlizzardCrowdStrike: Voodoo BearOSINT: QuedaghOSINT: TEMP.Noble
Last reported 2026-01-23
G10151 report
Scattered Spider
Microsoft: Octo TempestCrowdStrike: Muddled LibraVarious: UNC3944OSINT: Oktapus
Last reported 2026-02-10
G1059IR1 report
UNC1549
OSINT: Nimbus ManticoreOSINT: TA455OSINT: COBALT SMOKEY
Last reported 2026-05-22
G1055IR1 report
Void Manticore
OSINT: VOID MANTICOREOSINT: COBALT MYSTIQUEOSINT: Handala HackOSINT: Homeland Justice
Last reported 2026-03-12
G0035RU1 report
ENERGETIC BEAR
OSINT: BERSERK BEAROSINT: ALLANITEOSINT: CASTLEOSINT: DYMALLOY
Last reported 2026-10-15
G10521 report
Contagious Interview
OSINT: DeceptiveDevelopmentOSINT: Gwisin GangOSINT: Tenacious PungsanOSINT: DEV#POPPER
Last reported 2026-03-11
G00801 report
Cobalt
OSINT: Cobalt GroupOSINT: Cobalt GangOSINT: GOLD KINGSWOODOSINT: COBALT SPIDER
Last reported 2026-06-24
G0067KP1 report
APT37
Microsoft: Ruby SleetCrowdStrike: Ricochet CollimaVarious: ReaperOSINT: APT 37
Last reported 2026-05-05
G00911 report
Silence group
Various: SilenceOSINT: WHISPER SPIDER
Last reported 2026-10-14
G10321 report
INC Ransom
OSINT: GOLD IONIC
Last reported 2026-09-21
G10221 report
ToddyCat
OSINT: Websiic
Last reported 2026-06-30
G1033RU1 report
Callisto
OSINT: COLDRIVEROSINT: SEABORGIUMOSINT: TA446OSINT: GOSSAMER BEAR
Last reported 2026-09-29
G1034CN1 report
BRONZE HIGHLAND
OSINT: Evasive PandaOSINT: Daggerfly
Last reported 2025-12-24
Threat actorCN1 report
Amaranth-Dragon
single-name attribution
Last reported 2026-02-04
Threat actor1 report
BREEZE COMET
OSINT: UNC5669
Last reported 2026-09-01
Threat actorES1 report
Careto
OSINT: The MaskOSINT: MaskOSINT: Ugly Face
Last reported 2026-09-28
Threat actorIR1 report
Cavern Manticore
single-name attribution
Last reported 2026-07-06
Threat actorMY1 report
DragonForce
single-name attribution
Last reported 2026-07-09
Threat actor1 report
Fox Tempest
single-name attribution
Last reported 2026-05-19
Threat actorBY1 report
FrostyNeighbor
single-name attribution
Last reported 2026-05-14
Threat actorCN1 report
GopherWhisper
single-name attribution
Last reported 2026-04-23
Threat actorPS1 report
Handala
single-name attribution
Last reported 2026-03-12
Threat actor1 report
Head Mare
single-name attribution
Last reported 2026-08-11
Threat actor1 report
JadePuffer
OSINT: Storm-3168OSINT: JADEPUFFER
Last reported 2026-09-25
Threat actorUS1 report
NightEagle
OSINT: APT-Q-95
Last reported 2026-09-16
Threat actorKP1 report
Opal Sleet
OSINT: OSMIUMOSINT: KonniOSINT: Vedalia
Last reported 2026-01-22
Threat actor1 report
Operation Triangulation
single-name attribution
Last reported 2026-03-26
Threat actorCN1 report
Storm-1175
single-name attribution
Last reported 2026-04-06
Threat actor1 report
Storm-2561
single-name attribution
Last reported 2026-03-12
Threat actor1 report
Storm-2949
single-name attribution
Last reported 2026-05-18
Threat actorKP1 report
TraderTraitor
OSINT: Jade SleetOSINT: UNC4899OSINT: Pukchong
Last reported 2026-09-18
Threat actorCN1 report
UAT-7237
OSINT: CL-STA-1062
Last reported 2026-06-25
Threat actor1 report
UNC6671
single-name attribution
Last reported 2026-08-06
Threat actorCN1 report
Webworm
OSINT: Space Pirates
Last reported 2026-05-20
G0096CN0 reports
APT41
Microsoft: Wicked PandaCrowdStrike: WICKED PANDAOSINT: G0096OSINT: TA415
G0049IR0 reports
OilRig
OSINT: Twisted KittenOSINT: Cobalt GypsyOSINT: CrambusOSINT: Helix Kitten
G1017CN0 reports
Volt Typhoon
Microsoft (legacy): Vanguard PandaOSINT: BRONZE SILHOUETTEOSINT: UNC3236OSINT: Insidious Taurus
G0059IR0 reports
APT35
Microsoft: Mint SandstormCrowdStrike: PhosphorusVarious: Charming KittenOSINT: Newscaster Team
G0047RU0 reports
Gamaredon Group
OSINT: ACTINIUMOSINT: DEV-0157OSINT: Blue OtsoOSINT: BlueAlpha
G0046RU0 reports
FIN7
Microsoft: Sangria TempestCrowdStrike: CarbanakOSINT: CARBON SPIDEROSINT: GOLD NIAGARA
G0102RU0 reports
WIZARD SPIDER
OSINT: TEMP.MixMasterOSINT: GOLD BLACKBURNOSINT: FIN12OSINT: Periwinkle Tempest