Threat Actors
37 validated threat actors. Click crimes on any row to read the published incidents attributed to that actor. A daily job re-searches the web for new incidents per actor.
Catalog
· 37 VALID
| # | Name | Country | Type | Aliases | Threat mentions | CVE mentions | Cybercrime reported |
|---|---|---|---|---|---|---|---|
| 1 | Lynx | — | Ai-Web | Lynx | 0 | ||
| 2 | Lazarus | North Korea | State-sponsored APT | Lazarus, HIDDEN COBRA, APT38, DIAMOND SLEET | 0 | ||
| 3 | APT41 | China | State-sponsored APT | APT41, BARIUM, Winnti, Wicked Panda, Brass Typhoon | 0 | ||
| 4 | Dragonfly | Russia | State-sponsored APT | Dragonfly, Energetic Bear, Berserk Bear | 0 | ||
| 5 | LockBit | — | Ransomware-as-a-Service | LockBit | 0 | ||
| 6 | BlackCat / ALPHV | — | Ransomware-as-a-Service | BlackCat, ALPHV, Noberus | 0 | ||
| 7 | APT34 | Iran | State-sponsored APT | APT34, OilRig | 0 | ||
| 8 | Akira | — | Ransomware-as-a-Service | Akira | 0 | ||
| 9 | APT28 | Russia | State-sponsored APT | APT28, Fancy Bear, Sofacy, Strontium, FOREST BLIZZARD | 0 | ||
| 10 | Turla | Russia | State-sponsored APT | Turla, Venomous Bear | 0 | ||
| 11 | Conti | — | Ransomware-as-a-Service | Conti, Wizard Spider | 0 | ||
| 12 | Cl0p | — | Ransomware-as-a-Service | Cl0p, Clop | 0 | ||
| 13 | Kimsuky | North Korea | State-sponsored APT | Kimsuky, Velvet Chollima, Black Banshee | 0 | ||
| 14 | Qilin | — | Ai-Web | Qilin | 0 | ||
| 15 | Black Basta | — | Ransomware-as-a-Service | Black Basta, BlackBasta | 0 | ||
| 16 | REvil | — | Ransomware-as-a-Service | REvil, Sodinokibi | 0 | ||
| 17 | FIN7 | — | Cybercrime | FIN7, CARBANAK, SANGRIA TEMPEST | 0 | ||
| 18 | APT40 | China | State-sponsored APT | APT40, Leviathan, Bronze Mohawk | 0 | ||
| 19 | Dragonforce | — | Ai-Web | Dragonforce | 0 | ||
| 20 | APT10 | China | State-sponsored APT | APT10, Stone Panda, MenuPass | 0 | 0 | |
| 21 | APT17 | — | Ai-Web | APT17 | 0 | 0 | |
| 22 | APT29 | Russia | State-sponsored APT | APT29, Cozy Bear, NOBELIUM, MIDNIGHT BLIZZARD | 0 | 0 | |
| 23 | APT42 | — | Ai-Web | APT42 | 0 | 0 | |
| 24 | Charming Kitten | Iran | State-sponsored APT | Charming Kitten, APT35, Mint Sandstorm | 0 | 0 | |
| 25 | Equation Group | United States | State-sponsored APT | Equation Group | 0 | 0 | |
| 26 | FAMOUS CHOLLIMA | — | Ai-Web | FAMOUS CHOLLIMA | 0 | 0 | |
| 27 | Flax Typhoon | — | Ai-Web | Flax Typhoon | 0 | 0 | |
| 28 | GENESIS PANDA | — | Ai-Web | GENESIS PANDA | 0 | 0 | |
| 29 | INC Ransom | — | Ai-Web | INC Ransom | 0 | 0 | |
| 30 | MURKY PANDA | — | Ai-Web | MURKY PANDA | 0 | 0 | |
| 31 | Mustang Panda | China | State-sponsored APT | Mustang Panda, RedDelta, Bronze President | 0 | 0 | |
| 32 | Play | — | Ransomware-as-a-Service | PlayCrypt, Play Ransomware | 0 | 0 | |
| 33 | Salt Typhoon | — | Ai-Web | Salt Typhoon | 0 | 0 | |
| 34 | Sandworm | Russia | State-sponsored APT | Sandworm, VOODOO BEAR, Seashell Blizzard, APT44 | 0 | 0 | |
| 35 | Scattered Spider | — | Cybercrime | Scattered Spider, UNC3944, OCTO TEMPEST, 0ktapus | 0 | 0 | |
| 36 | Star Blizzard | — | Ai-Web | Star Blizzard | 0 | 0 | |
| 37 | Volt Typhoon | China | State-sponsored APT | Volt Typhoon, VANGUARD PANDA, BRONZE SILHOUETTE | 0 | 0 |