DossiersNation-state and criminal threat actors
Threat actor dossiers
Every tracked actor, grouped by its attributed or reported origin. Each dossier shows how strong the attribution is, with its sources, ATT&CK techniques, malware, exploited CVEs and campaigns.
137Dossiers
18Origins
357ATT&CK techniques
489Campaigns
China41
- Antique TyphoonPRC-affiliated · Espionage
- APT15China-based · assessed · Espionage
- APT27Chinese nation-state · assessed · Espionage
- APT5China-based · assessed · Espionage
- BlackTechPRC-linked · Espionage
- BRONZE BUTLERChina-based · assessed · Espionage
- BRONZE STARLIGHTChina-based · assessed · Mixed
- ChimeraChina-based · assessed · Espionage
- CloudSorcererChina-nexus · suspected · Espionage
- DaggerflyPRC-linked · assessed · Espionage
- Double DragonChinese state-sponsored · assessed · Mixed
- Earth LuscaI-SOON contractor team · assessed · Mixed
- FamousSparrowChina-aligned · assessed · Espionage
- Flax TyphoonChinese government-linked · Espionage
- GALLIUMChina-linked · assessed · Espionage
- GTG-1002Chinese state-sponsored · assessed · Espionage
- LeviathanMSS Hainan State Security Dept · Espionage
- Lotus BlossomChina-based · assessed · Espionage
- MirrorFaceChina-linked · Espionage
- Mustang PandaChina-based · assessed · Espionage
- NaikonPLA Unit 78020 · assessed · Espionage
- NegativeGlimmerChina-aligned · assessed · Espionage
- Red MenshenChina-nexus · assessed · Espionage
- RedEchoChina-linked · assessed · Espionage
- Salt TyphoonPRC state-sponsored · Espionage
- Silk TyphoonMSS, via contract hackers · Mixed
- SlippyNunchucksChina-aligned · assessed · Espionage
- SteppeDriverChina-aligned · assessed · Espionage
- Stone PandaMSS Tianjin bureau · Espionage
- Storm-0940China-state aligned · assessed · Espionage
- Storm-2603China-based · assessed · Mixed
- TA419China-aligned · assessed · Espionage
- ToddyCatChina-based · assessed · Espionage
- Tonto TeamChinese state-sponsored · assessed · Espionage
- UAT-11587China-nexus · assessed · Espionage
- UNC3886China-nexus · assessed · Espionage
- UNC5174Suspected MSS contractor · assessed · Espionage
- UNC5221China-nexus · suspected · Espionage
- Velvet AntChina-nexus · suspected · Espionage
- Volt TyphoonPRC state-sponsored · Destructive
- ZirconiumMSS Hubei State Security Dept · Espionage
Iran26
- AgriusMOIS · assessed · Destructive
- APT39MOIS · Espionage
- APT42IRGC Intelligence Organization · Espionage
- BladedFelineIran-aligned · assessed · Espionage
- Cavern ManticoreMOIS-linked · assessed · Espionage
- Charming KittenIRGC · assessed · Mixed
- CL-STA-1178Iran-nexus · assessed · Espionage
- Cotton SandstormEmennet Pasargad / ASA · Mixed
- Cyber Islamic ResistanceIranian-backed hacktivists · assessed · Destructive
- CyberAv3ngersIRGC-affiliated · Destructive
- DNSpionageIran · assessed · Espionage
- FilthyFelineOilRig subgroup; linked to MOIS · assessed · Espionage
- Fox KittenIranian government · Mixed
- Gray SandstormIran-origin · assessed · Espionage
- LeafminerIranian · assessed · Espionage
- LyceumIran-aligned, OilRig subgroup · assessed · Espionage
- Mirage KittenIRGC-affiliated · assessed · Espionage
- Moses StaffIranian · suspected · Destructive
- MuddyWaterMOIS · Espionage
- OilRigMOIS · assessed · Espionage
- Refined KittenIRGC · assessed · Mixed
- Silent LibrarianIRGC, via Mabna Institute · Mixed
- TortoiseshellIRGC-linked · assessed · Espionage
- UNC1860MOIS-affiliated · assessed · Espionage
- VOID MANTICOREMOIS · Destructive
- xHuntIran · assessed · Espionage
Russia15
- Cadet BlizzardGRU Unit 29155 · Destructive
- COLDRIVERFSB Centre 18 · Espionage
- Cozy BearSVR · Espionage
- DragonflyFSB Center 16 · Espionage
- Fancy BearGRU Unit 26165 · Espionage
- GamaredonFSB 18th Center · Espionage
- PhantomCaptchaRussia-aligned · suspected · Espionage
- RomComGRU Unit 29155 · assessed · Mixed
- Saint BearRussian-nexus · assessed · Espionage
- SandwormGRU Unit 74455 · Destructive
- TEMP.VelesTsNIIKhM, Russian MoD institute · Destructive
- TurlaFSB Center 16 · Espionage
- UAC-0050Russian law-enforcement-linked · Mixed
- UAC-0099Russia-aligned · assessed · Espionage
- Void BlizzardRussian state-supported · Espionage
North Korea11
- AndarielRGB 3rd Bureau · Mixed
- AppleJeusRGB · assessed · Financial
- BlueNoroffRGB · Financial
- Contagious InterviewDPRK 313 General Bureau · Mixed
- Jade SleetDPRK state-sponsored · Financial
- Jasper SleetDPRK state · Mixed
- KimsukyRGB · Espionage
- KonniDPRK state-sponsored · assessed · Espionage
- Lazarus GroupRGB 3rd Bureau, Lab 110 · Mixed
- Moonstone SleetNorth Korean state · assessed · Mixed
- ScarCruftMinistry of State Security · assessed · Espionage
India4
- BitterIndian state-backed · assessed · Espionage
- DoNot TeamIndia-linked · suspected · Espionage
- PatchworkIndia-linked · suspected · Espionage
- SideWinderIndia-linked · suspected · Espionage
Lebanon3
- Dark CaracalLebanon's General Security · assessed · Mixed
- Lebanese CedarLebanon-based · assessed · Espionage
- POLONIUMLebanon-based · assessed · Espionage
Belarus2
- GhostwriterBelarus or Russia's GRU · contested · Espionage
- MoustachedBouncerBelarus-aligned · assessed · Espionage
Pakistan2
- SideCopyPakistan-based · assessed · Espionage
- Transparent TribePakistan-based · suspected · Espionage
Palestine2
- Arid ViperHamas-aligned · assessed · Espionage
- WIRTEHamas-affiliated · assessed · Mixed
South Korea2
Turkey2
- Sea TurtleTürkiye-linked · assessed · Espionage
- StrongPityUnattributed · Espionage
Israel1
- Unit 8200IDF Unit 8200 · suspected · Mixed
Kazakhstan1
- Silent LynxKazakhstan nexus · assessed · Espionage
Spain1
- The MaskSpanish government · suspected · Espionage
Taiwan1
- GreenSpotTaiwan's ICEFCOM · claimed · Espionage
Ukraine1
- Defence Intelligence of UkraineHUR, Ministry of Defence · self-declared · Mixed
USA1
- Equation GroupNSA · suspected · Espionage
Vietnam1
- OceanLotusVietnam-based · assessed · Espionage
Origin not established20
- BO TeamPro-Ukrainian hacktivists · Mixed
- Cloud AtlasUnattributed · Espionage
- ConfuciusUnattributed · Espionage
- Core WerewolfUnattributed · Espionage
- ForumTrollUnattributed · Espionage
- Operation TriangulationUnidentified · Espionage
- Paper WerewolfUnattributed · Mixed
- PhantomCoreUnattributed · Mixed
- Predatory SparrowUnattributed · Destructive
- Sapphire WerewolfUnattributed · Espionage
- Scattered SpiderCriminal collective · Financial
- Shedding ZmiyUnattributed · Mixed
- ShinyHuntersCriminal collective · Financial
- Sticky WerewolfUnattributed · Espionage
- TeamPCPCriminal group · Financial
- TGR-STA-1030Unattributed, state-aligned · Espionage
- Tropic TrooperUnattributed · Espionage
- UNC6671Criminal collective · Financial
- Vortex WerewolfUnattributed · Espionage
- Winter VivernUnattributed · Espionage
No dossier matches that filter.