admin/APT_REPORT
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
blackorbird
2024-07-25 14:26:26 +08:00
committed by GitHub
parent 92360248bc
commit 199067c6ee
1 changed files with 244 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

244
summary/2024/threat actor list from cs.csv Normal file
View File

@@ -0,0 +1,244 @@
Alias,Last Active,Status,Origin,Target Industries,Target Countries,Actor Type,Motivation
IntelBroker,Jun 2024,Active,Unknown,17,9,eCrime,Criminal
"PlayCrypt, PLAY",Jun 2024,Active,Unknown,31,35,eCrime,Criminal
"Royal, BlackSuit",Jun 2024,Active,Russian Federation,29,29,eCrime,Criminal
"LockBitSupp, LockBit",Jun 2024,Active,Russian Federation,44,103,eCrime,Criminal
Akira,Jun 2024,Active,Unknown,29,38,eCrime,Criminal
BianLian,Jun 2024,Active,Unknown,32,32,eCrime,Criminal
"INC, Nemty, Nemty X, Nefilim, GOLD MANSARD, Nokoyawa",Jun 2024,Active,"Russian Federation, Eastern Europe",22,19,eCrime,Criminal
nixploiter,Jun 2024,Active,Unknown,26,32,eCrime,Criminal
"hacking group Medusa, Medusa ransomware team, Medusa team",Jun 2024,Active,Unknown,27,39,eCrime,Criminal
"QBot, Quakbot, QakBot, PinkSlip, GOLD LAGOON, Qakbot",Jun 2024,Active,"Russian Federation, Eastern Europe",23,13,eCrime,Criminal
"Vice Society, DEV-0832, Vanilla Tempest, Rhysida",Jun 2024,Active,Unknown,25,41,eCrime,Criminal
--,Jun 2024,Active,Unknown,25,33,eCrime,Criminal
"BOSS, Lions, AcidLow, exp3rt, brain, RedTeam, bigrichy, FASTPRISONER, Birdy, 5MRBID, Signature, 5BIRD, 8BASE, EightBase, SawGoD, REDTEAMDR, bigboss, reverse5net, RADAR, Dispossessor, RAID",Jun 2024,Active,"Russian Federation, Eastern Europe",32,53,eCrime,Criminal
"FIN11, Clop",Jun 2024,Active,"Russian Federation, Eastern Europe",37,48,eCrime,Criminal
"05716nnm, Nnm05716, NoName, NoName057",Jun 2024,Active,Russian Federation,12,28,Targeted,Hacktivism
"Gamaredon, Trident Ursa, APT-C-53, UAC-0010, Blue Otso, WINTERFLOUNDER, TEMP.Armageddon, SpiceyHoney Campaign, IRON TILDEN, Operation Armageddon, ACTINIUM, UNC530, Shuckworm, Aqua Blizzard",Jun 2024,Active,Russian Federation,5,5,Targeted,State-Sponsored
"Lockean, UNC4393",Jun 2024,Active,Unknown,22,19,eCrime,Criminal
Storm-0216,Jun 2024,Active,Unknown,24,17,eCrime,Criminal
"LUCR-3, Octo Tempest, Roasted 0ktapus, Scatter Swine, UNC3944, Storm-0875",Jun 2024,Active,Unknown,21,14,eCrime,Criminal
--,Jun 2024,Active,Unknown,9,7,eCrime,Criminal
"FIN13, Elephant Beetle",Jun 2024,Active,Unknown,2,4,eCrime,Criminal
"Operation Layover, TA2541",Jun 2024,Active,Nigeria,3,0,eCrime,Criminal
"Taurus Loader TeamViewer Module, Taurus Loader Reconnaissance Module, Taurus Loader Ransomware Module, Golden Chickens, SKID, VenomKit, Taurus Loader, Taurus Loader Stealer Module",Jun 2024,Active,"Canada, Moldova",0,0,eCrime,Criminal
"Temp.Isotope, IRON LIBERTY, BROMINE, Ghost Blizzard, ALLANITE, DYMALLOY, Dragonfly 2.0",Jun 2024,Active,Russian Federation,23,41,Targeted,State-Sponsored
TA558,Jun 2024,Active,Brazil,4,8,eCrime,Criminal
Daixin Team,Jun 2024,Active,Unknown,5,4,eCrime,Criminal
"APT-C-36, Blind Eagle",Jun 2024,Active,Colombia,9,3,eCrime,Criminal
--,Jun 2024,Active,Unknown,3,29,eCrime,Criminal
--,Jun 2024,Active,Brazil,6,10,eCrime,Criminal
UNC961,Jun 2024,Active,Unknown,9,3,eCrime,Criminal
Retefe,Jun 2024,Active,"Russian Federation, Eastern Europe",3,31,eCrime,Criminal
"STRONTIUM, Tsar-Team, SNAKEMACKEREL, Tsar Team, Pawn Storm, Sofacy, TG-4127, Fighting Ursa, Forest Blizzard, APT28, Swallowtail, FROZENLAKE, Zebrocy, Sednit, Iron Twilight, UAC-0028, Sofacy Group",Jun 2024,Active,Russian Federation,13,31,Targeted,State-Sponsored
"Atomic MacOS Stealer, AMOS, ping3r",Jun 2024,Active,Unknown,0,0,eCrime,Criminal
"eugenfest, Payk_34",Jun 2024,Active,Unknown,0,0,eCrime,Criminal
"Amadey, a2019, a2022, inCrease",Jun 2024,Active,Unknown,0,0,eCrime,Criminal
PrivateLoader,Jun 2024,Active,"Russian Federation, Eastern Europe, Central Asia",1,0,eCrime,Criminal
--,Jun 2024,Active,Unknown,0,0,eCrime,Criminal
"STRRAT, Strigoi Master",Jun 2024,Active,Unknown,0,0,eCrime,Criminal
DanaBot,Jun 2024,Active,"Russian Federation, Eastern Europe",12,6,eCrime,Criminal
"Bitter APT, Orange Yali",May 2024,Active,India,6,4,Targeted,State-Sponsored
BackDoorDiplomacy,May 2024,Active,"China, East Asia",1,10,Targeted,State-Sponsored
--,May 2024,Active,Unknown,4,1,eCrime,Criminal
"Cerium, APT43, Konni, TA406, Osmium, Springtail, Black Banshee, Opal Sleet, Emerald Sleet, Thallium, TA408, TA427, Crooked Pisces, SharpTongue, Ruby Sleet, Kimsuky",May 2024,Active,North Korea,18,12,Targeted,State-Sponsored
"APT38, Leery Turtle, Sapphire Sleet, Lazarus Group, HIDDEN COBRA, CryptoCore, COPERNICIUM, TAG-71, BeagleBoyz, Bluenoroff, CageyChameleon, CryptoMimic, Dangerous Password, TA444",May 2024,Active,North Korea,4,37,Targeted,"State-Sponsored, Criminal"
"mr._D0n#T, Donut, x4k, Mr.D0nut",May 2024,Active,Unknown,16,15,eCrime,Criminal
"kalin3t, Holy Souls, Black Magic, AMC239, Atlas Group, Hackers of Savior, Sangkancil, Yooz E Cybery, Yare Gomnam Cyber Team, Deus, NEPTUNIUM, Generous Thief, Al-Toufan",May 2024,Active,Iran,9,3,Targeted,State-Sponsored
"GREF, TG-2633, BRONZE ATLAS, Brass Typhoon, Winnti, Group 72, BARIUM, LEAD, APT41",May 2024,Active,China,22,9,Targeted,State-Sponsored
Br0k3r,May 2024,Active,Unknown,23,26,eCrime,Criminal
"IcedID, BokBot, GOLD SWATHMORE",May 2024,Active,"Russian Federation, Eastern Europe",2,7,eCrime,Criminal
"Earth Hundun, BlackTech, COBALT, Palmerworm, WaterBear, Red Djinn",May 2024,Active,China,7,5,Targeted,State-Sponsored
"Andariel, Lazarus, New Romanic Cyber Army, PLUTONIUM, Onyx Sleet",May 2024,Active,North Korea,22,18,Targeted,"State-Sponsored, Criminal"
"Smoke Loader, Dofoil, Smoke Bot",May 2024,Active,"Russian Federation, Eastern Europe",1,0,eCrime,Criminal
NilePhish,May 2024,Active,Egypt,3,2,Targeted,State-Sponsored
RedFoxtrot,Apr 2024,Active,China,7,8,Targeted,State-Sponsored
Flax Typhoon,Apr 2024,Active,China,5,5,Targeted,State-Sponsored
"UNC577, UNC4736, Jade Sleet, BeagleBoyz, Lazarus Group, Diamond Sleet, APT-C-26, TEMP.Hermit, Moonstone Sleet, HIDDEN COBRA, Black Artemis, Zinc, UNC2970",Apr 2024,Active,North Korea,24,31,Targeted,State-Sponsored
"Hazel Sandstorm, Homeland Justice, DEV-0842 , Void Manticore",Apr 2024,Active,Iran,3,2,Targeted,State-Sponsored
"LuoYu, Storm-0601",Apr 2024,Active,China,7,4,Targeted,State-Sponsored
"Matanbuchus, BelialDemon",Apr 2024,Active,Unknown,0,0,eCrime,Criminal
"Kukacka, Sality, KuKu, SalLoad, Kookoo, SaliCode",Apr 2024,Active,Russian Federation,1,2,eCrime,Criminal
"COLDRIVER, SEABORGIUM, DancingSalome, TAG-53, Blue Callisto, Calisto, Star Blizzard, Callisto",Apr 2024,Active,Russian Federation,6,4,Targeted,State-Sponsored
"Fsociety, CryptersAndTools",Apr 2024,Active,Brazil,0,0,eCrime,Criminal
Desorden Group,Apr 2024,Active,Unknown,7,8,eCrime,Criminal
"Reaper, ScarCruft, Group123, TEMP.Reaper, Venus121, ITG10, APT37, Red Eyes, Inky Squid, Moldy Pisces",Apr 2024,Active,North Korea,10,5,Targeted,State-Sponsored
"YoroTrooper, Tomiris, SturgeonPhisher",Apr 2024,Active,Unknown,0,0,Targeted,State-Sponsored
"HoneyMyte, Temp.Hex, UNC1066, BRONZE PRESIDENT, Stately Taurus",Mar 2024,Active,China,5,6,Targeted,State-Sponsored
--,Mar 2024,Active,Unknown,1,0,eCrime,Criminal
"Temp.Zagros, MERCURY, Seedworm, Yellow Nix, Mango Sandstorm, MuddyWater, NTSTATS, POWERSTATS",Mar 2024,Active,Iran,15,20,Targeted,State-Sponsored
"SANDFISH, ELECTRUM, Quedagh, IRON VIKING, Blue Echidna, Telebots, Sunglow Blizzard, IRIDIUM, Seashell Blizzard, Sandworm, Hades, BlackEnergy Group, FROZENBARENTS, UAC-0082, DEV-0665",Mar 2024,Active,Russian Federation,8,10,Targeted,State-Sponsored
"Xe Group, XeGroup",Mar 2024,Active,Vietnam,1,0,eCrime,Criminal
--,Mar 2024,Active,Unknown,0,0,eCrime,Criminal
"NOBERUS, ALPHV, BlackCat",Mar 2024,Active,Unknown,30,37,eCrime,Criminal
"Confucious, Confucius, Orange Dev 1",Mar 2024,Active,Unknown,2,1,Targeted,State-Sponsored
"Rattlesnake, T-APT-04, APT-C-17, APT-Q-39, Sidewinder, Baby Elephant, Operation Origami, Rattlesnake, Hardcore Nationalist",Mar 2024,Active,India,11,7,Targeted,State-Sponsored
"RedAlpha, Red Dev 3, DeepCliff",Mar 2024,Active,Unknown,5,6,Targeted,State-Sponsored
"Red Scully, Charcoal Typhoon, CHROMIUM, TAG-22, ControlX, BountyGlad, BRONZE UNIVERSITY",Feb 2024,Active,China,18,15,Targeted,State-Sponsored
"Office Monkeys, CozyCar, Midnight Blizzard, IRON RITUAL, YTTRIUM, NOBELIUM, IRON HEMLOCK, Blue Kitsune, JACKMACKEREL, APT29, “The Dukes”, UAC-0029, The Dukes, CozyDuke, Cloaked Ursa",Feb 2024,Active,Russian Federation,14,21,Targeted,State-Sponsored
"Bugat, Hades, Group: Evil Corp, iEncrypt, EvilCorp, PAYLOADBIN, Manatee Tempest, Friedex, BitPaymer, Dridex, WastedLocker, Phoenix Cryptolocker, GOLD DRAKE, GOLD WINTER",Feb 2024,Active,"Russian Federation, Eastern Europe",24,11,eCrime,Criminal
UAC-0050,Feb 2024,Active,Russian Federation,5,4,eCrime,"State-Sponsored, Hacktivism, Criminal"
--,Feb 2024,Active,India,4,5,Targeted,State-Sponsored
"Volt Typhoon, BRONZE SILHOUETTE",Feb 2024,Active,China,14,1,Targeted,State-Sponsored
"Patchwork, Chinastrats, Monsoon, APT-C-09, Dropping Elephant, Orange Athos",Feb 2024,Active,India,9,6,Targeted,State-Sponsored
"Sea Turtle, SILICON, UNC1326, Marbled Dust",Jan 2024,Active,Turkey,5,16,Targeted,State-Sponsored
--,Jan 2024,Active,Iran,9,2,Targeted,State-Sponsored
"APT35, CURIUM, Smoke Sandstorm, DEV-0228, Crimson Sandstorm, Cuboid Sandstorm, Tortoiseshell, Yellow Liderc, DEV-0056",Jan 2024,Active,Iran,7,5,Targeted,State-Sponsored
"TIN WOODLAWN, Scarlet Ioke, Dark Pink, Saaiwc Group, APT-LY-1005, OceanLotus, SeaLotus, APT32",Jan 2024,Active,Vietnam,12,8,Targeted,State-Sponsored
"Donot, Orange Kala, Operation Hangover, Appin, APT-C-35",Jan 2024,Active,India,9,18,Targeted,State-Sponsored
"KRYPTON, Waterbug, Blue Python, Uroboros, Snake, Turla, IRON HUNTER, BELUGASTURGEON, SUMMIT, Secret Blizzard",Dec 2023,Active,Russian Federation,6,43,Targeted,State-Sponsored
Cyber Partisans,Dec 2023,Active,Unknown,6,1,Targeted,Hacktivism
Lorenz,Dec 2023,Active,Unknown,21,11,eCrime,Criminal
"STORM-0866, Red Dev 40, Sandman APT",Dec 2023,Active,China,2,2,Targeted,State-Sponsored
"COPPER FIELDSTONE, Green Havildar, APT36, Transparent Tribe, C-Major, Transparent Tribe, C-Major, ProjectM",Dec 2023,Active,Pakistan,8,4,Targeted,State-Sponsored
Greenbug,Nov 2023,Active,Iran,2,2,Targeted,State-Sponsored
"CHRYSENE, OilRig, Helminth, APT34, ITG13, Hazel Sandstorm, EUROPIUM, Greenbug, Clayslide, IRN2, COBALT GYPSY",Nov 2023,Active,Iran,12,15,Targeted,State-Sponsored
"PHOSPHORUS, TA453, Newscaster, Parastoo, APT35, Mint Sandstorm, UNC788, COBALT ILLUSION, APT42",Oct 2023,Active,Iran,14,8,Targeted,State-Sponsored
ChamelGang,Oct 2023,Active,China,7,5,Targeted,State-Sponsored
"Abraham's Ax, Marigold Sandstorm, DEV-500, Moses Staff",Oct 2023,Active,Iran,11,2,Targeted,State-Sponsored
Ayyıldız Tim,Oct 2023,Active,Turkey,5,4,Targeted,Hacktivism
"Storm-0861, Scarred Manticore",Oct 2023,Active,Iran,6,8,Targeted,State-Sponsored
"GREATRIFT, Plaid Rain, POLONIUM, UNC4453",Oct 2023,Active,Lebanon,4,2,Targeted,State-Sponsored
--,Oct 2023,Active,China,11,4,Targeted,State-Sponsored
Ragnar Locker,Oct 2023,Active,Eastern Europe,21,9,eCrime,Criminal
AnonGhost,Oct 2023,Active,Unknown,7,13,Targeted,Hacktivism
"DarkRypt, Pink Sandstorm, AMERICIUM, Agrius, Black Shadow",Oct 2023,Active,Iran,10,2,Targeted,State-Sponsored
"SideCopy, Operation SideCopy",Oct 2023,Active,Pakistan,3,2,Targeted,State-Sponsored
"Arid Viper, APT-C-23, Grey Karkadann, Mantis, Pinstripe Lightning",Oct 2023,Active,Palestine,3,3,Targeted,State-Sponsored
"APT27, HIPPO Team, BRONZE UNION, TG-3390, Lucky Mouse, UNC215",Oct 2023,Active,China,10,8,Targeted,State-Sponsored
--,Sep 2023,Active,China,5,3,Targeted,State-Sponsored
"Evilnum, DeathStalker, TA4563",Sep 2023,Active,Unknown,4,4,eCrime,Criminal
"APT39, ITG07, COBALT HICKMAN, Storm-0589, Chafer, Cadelle",Sep 2023,Active,Iran,5,9,Targeted,State-Sponsored
--,Sep 2023,Active,Unknown,1,0,eCrime,Criminal
r1z,Sep 2023,Active,Unknown,0,0,eCrime,Criminal
"alfredoaa, IlonMask, efw, StreetSkip, Viking, farnetwork, farcat, EronM, Network",Sep 2023,Active,Unknown,18,18,eCrime,Criminal
"GALLIUM, Soft Cell, Alloy Taurus, Granite Typhoon",Sep 2023,Active,China,4,4,Targeted,State-Sponsored
"Molerats, Gaza Hacker Team, Gaza Cybergang, Aluminum Saratoga",Aug 2023,Active,Palestine,3,8,Targeted,State-Sponsored
Earth Estries,Aug 2023,Active,China,4,1,Targeted,State-Sponsored
--,Aug 2023,Active,China,3,6,Targeted,State-Sponsored
"HEXANE, Lyceum, COBALT LYCEUM, SiameseKitten",Jul 2023,Active,Iran,6,5,Targeted,State-Sponsored
"RedDelta, Tantalum",Jul 2023,Active,China,2,2,Targeted,State-Sponsored
"drumrlu, 3lv4n, @elvan_tarak",Jul 2023,Active,Turkey,22,34,eCrime,Criminal
"Vatet, Defray, Defray 2018, Target777, PyXie, GOLD DUPONT, Defray777, Shifu",Jul 2023,Active,Unknown,27,26,eCrime,Criminal
"APT-C-37, APT-C-27, Syrian Electronic Army, SEA, Golden Mouse",Jun 2023,Active,Syrian Arab Republic,3,3,Targeted,State-Sponsored
"Lotus Blossom, Thrip, Billbug, Elise",Jun 2023,Active,China,8,8,Targeted,State-Sponsored
Bax026,May 2023,Active,Iran,7,3,Targeted,"Hacktivism, Criminal"
"KelvinSecTeam, KelvinSecurityTeam, KelvinSecurity",Apr 2023,Active,Venezuela,16,23,Targeted,"Criminal, Hacktivism"
"Lorec53, Cadet Blizzard, UAC-0056, Lorec Bear, Bleeding Bear, Saint Bear, Nascent Ursa, UNC2589, Frozen Vista, DEV-0586",Apr 2023,Active,Russian Federation,3,4,Targeted,State-Sponsored
"Phosphorus, DEV-0270, COBALT MIRAGE, UNC2448",Mar 2023,Active,Iran,19,6,Targeted,State-Sponsored
"Emotet, Geodo, GOLD CRESTWOOD, TA542",Feb 2023,Inactive,"Russian Federation, Eastern Europe",7,12,eCrime,Criminal
"EXOTIC LILY, TA580, Projector Libra",Feb 2023,Inactive,Unknown,1,7,eCrime,Criminal
"GlobeImposter, PSCrypt, a11chemist, helter, A1Lock",Feb 2023,Inactive,Russian Federation,5,5,eCrime,Criminal
"El Machete, APT-C-43",Feb 2023,Active,Colombia,3,8,Targeted,State-Sponsored
Hive,Jan 2023,Inactive,Unknown,21,20,eCrime,Criminal
"NICKEL, Red Vulture, BRONZE PALACE, DiplomaticDuck, Nylon Typhoon, APT15, Mirage, ke3chang",Dec 2022,Active,China,6,24,Targeted,State-Sponsored
"APT5, Comfoo, BRONZE FLEETWOOD, Poisoned Flight, DPD, Mulberry Typhoon, MANGANESE, Temp.Bottle, TG-2754",Dec 2022,Active,China,6,1,Targeted,State-Sponsored
"Quantum, AstroLocker, XingLocker, MountLocker, SunRiseLocker",Nov 2022,Inactive,Unknown,22,21,eCrime,Criminal
"Cutwail, 0bulk, Psych, R4, Evolution R4, GOLD ESSEX, Cutwail (v2), 0bulk Psych Evolution R4",Nov 2022,Inactive,"Russian Federation, Eastern Europe",2,4,eCrime,Criminal
"TotBrick, Conti, BazarLoader, TrickBoot, FIN12, Periwinkle Tempest, TrickLoader, Kegtap, TheTrick, UNC1878, TrickBot, Ryuk, Anchor DNS, GOLD ULRICK",Nov 2022,Inactive,"Russian Federation, Eastern Europe",39,42,eCrime,Criminal
"ELBRUS, Sangria Tempest, FIN7, GOLD NIAGARA, GOLD WATERFALL, ITG14, Carbanak",Nov 2022,Active,"Russian Federation, Ukraine",29,35,eCrime,Criminal
"LAPSUS, Strawberry Tempest, Lapsus$ Group, Lapsus$",May 2022,Inactive,Unknown,8,5,eCrime,Criminal
"Cabassous, FluBot, Cabossous, FakeChat",May 2022,Inactive,Eastern Europe,1,10,eCrime,Criminal
"ICTUS Team, Tapesh Security Team, BiskooitPedar, Cyber Avengers",May 2022,Inactive,Iran,2,4,Targeted,Hacktivism
"Zloader, Silent Night, DELoader, Terdot",Mar 2022,Inactive,Unknown,1,0,eCrime,Criminal
"PARISITE, UNC757, Fox Kitten, Yellow Dev 15, COBALT FOXGLOVE, Lemon Sandstorm",Mar 2022,Active,Iran,16,2,Targeted,State-Sponsored
GOLD HERON,Feb 2022,Retired,"Russian Federation, Eastern Europe",31,32,eCrime,Criminal
RobbinHood,Feb 2022,Retired,Unknown,4,3,eCrime,Criminal
"DeathKitty, DeathRansom, HelloKitty, HellKitty, FiveHands",Jan 2022,Retired,Unknown,6,5,eCrime,Criminal
FunnyDream,Jan 2022,Active,China,2,3,Targeted,State-Sponsored
"ServHelper, HRDP, La_Citrix, X3_Mazafaka",Dec 2021,Inactive,Unknown,1,0,eCrime,Criminal
"Pysa, Mespinoza, GOLD BURLAP",Dec 2021,Inactive,Unknown,31,34,eCrime,Criminal
Circle Typhoon,Dec 2021,Active,Unknown,7,2,Targeted,Unknown
--,Nov 2021,Active,Unknown,1,1,Targeted,State-Sponsored
Unidentified Team,Nov 2021,Inactive,Iran,3,2,Targeted,Hacktivism
"Temp.Periscope, Temp.Jumper, Leviathan, APT40, GADOLINIUM, Mudcarp, Gingham Typhoon",Nov 2021,Active,China,14,14,Targeted,State-Sponsored
"APT23, KeyBoy, Tropic Trooper",Nov 2021,Active,China,6,6,Targeted,State-Sponsored
"Sodinokibi, GOLD GARDEN, GOLD SOUTHFIELD, GandCrab, REvil",Oct 2021,Inactive,"Russian Federation, Eastern Europe",34,39,eCrime,Criminal
"MysticChess, CactusPete, Tonto Team, Earth Akhlut, Jennifer Group, Bronze Huntley, LoneRanger",Sep 2021,Active,China,6,6,Targeted,State-Sponsored
"Elfin, Magnallium, HOLMIUM, COBALT TRINITY, Peach Sandstorm, APT33",Jul 2021,Active,Iran,5,3,Targeted,State-Sponsored
"APT-C-06, DarkHotel, Tapaoux, Fallout Team, DUBNIUM",Jun 2021,Active,South Korea,7,6,Targeted,State-Sponsored
Avaddon,Jun 2021,Inactive,Unknown,32,40,eCrime,Criminal
"TinyLoader, TinyPoS, Tiny Utils",Apr 2021,Inactive,"Russian Federation, Eastern Europe",2,5,eCrime,Criminal
"Silent Librarian, Cobalt Dickens, Yellow Nabu, TA407, Mabna Institute",Mar 2021,Active,Iran,1,21,Targeted,State-Sponsored
"BRONZE VINEWOOD, Chameleon, MrsDash, Violet Typhoon, APT31, ZIRCONIUM",Mar 2021,Active,China,12,2,Targeted,State-Sponsored
"Maze Team, Maze, Egregor, Egregor Team, GOLD PHANTOM, GOLD VILLAGE",Feb 2021,Inactive,"Russian Federation, Eastern Europe",33,40,eCrime,Criminal
"Naikon, Camerashy",Feb 2021,Active,China,4,10,Targeted,State-Sponsored
"Mailto2, KoKo, Netwalker, and KoKo, KazKavKovKiz, Mailto",Jan 2021,Inactive,"Russian Federation, Eastern Europe",27,26,eCrime,Criminal
--,Jan 2021,Active,China,7,4,Targeted,State-Sponsored
"CageyChameleon, CryptoCore, CryptoMimic, Dangerous Password, Sapphire Sleet",Dec 2020,Retired,North Korea,3,4,eCrime,"State-Sponsored, Criminal"
EmpireMonkey,Nov 2020,Retired,Unknown,6,3,eCrime,Criminal
"xHunt, Sakabota, COBALT KATANA",Aug 2020,Active,Iran,3,1,Targeted,State-Sponsored
"La Nueve de Anon, La9",Jul 2020,Inactive,Spain,5,1,Targeted,Hacktivism
"Red Hackers Association, RedHack",Jun 2020,Inactive,Turkey,5,2,Targeted,Unknown
Qademoun,Jun 2020,Inactive,Lebanon,5,1,Targeted,Hacktivism
Ruthenium,Apr 2020,Inactive,China,6,4,Targeted,State-Sponsored
Syrian Electronic Army,Mar 2020,Retired,Syrian Arab Republic,6,6,Targeted,State-Sponsored
"Phineas Fisher, Subcowmandante Marcos",Feb 2020,Inactive,Unknown,6,6,Targeted,Hacktivism
"Silence Group, TrueBot",Feb 2020,Inactive,"Russian Federation, Eastern Europe",2,3,eCrime,Criminal
"Cobalt Group, Cobalt Gang, GOLD KINGSWOOD, Mule Libra",Feb 2020,Inactive,Unknown,3,14,eCrime,Criminal
"FIN6, ITG08, GOLD FRANKLIN, Camouflage Tempest, FrameworkPoS, Trinity",Jun 2019,Inactive,"Russian Federation, Eastern Europe",2,1,eCrime,Criminal
"Eredel and Supreme ++, Nocturnal Stealer, Arkei Stealer, Rarog, Eredel, Supreme ++",May 2019,Inactive,Russian Federation,0,0,eCrime,Criminal
Ryuk,May 2019,Retired,"Russian Federation, Eastern Europe",7,3,eCrime,Criminal
"TA505, CraP2P, Necurs spam botnet",Apr 2019,Inactive,"Russian Federation, Eastern Europe",2,0,eCrime,Criminal
"Tick, BRONZE BUTLER, Redbaldknight",Mar 2019,Retired,China,5,4,Targeted,State-Sponsored
The Dark Overlord,Jan 2019,Inactive,United States,6,1,eCrime,Criminal
Taidoor,Jan 2019,Inactive,China,4,3,Targeted,State-Sponsored
"GOLD LOWELL, Samas, SamSam, Samsa, SamsamCrypt",Nov 2018,Inactive,Iran,5,1,eCrime,Criminal
APT26,Oct 2018,Inactive,China,3,1,Targeted,State-Sponsored
Buhtrap,Oct 2018,Inactive,Russian Federation,1,2,eCrime,Criminal
"Cutwail (v1), 0bulk Psyche Evolution R4",Oct 2018,Inactive,"Russian Federation, Eastern Europe",1,0,eCrime,Criminal
"Panda Banker, Panda Zeus",Oct 2018,Inactive,"Russian Federation, Eastern Europe",6,9,eCrime,Criminal
"z*Stealer, MKL Keylogger, MBS Bitcoin Stealer, CPPGURU, C++ GURU, sw^team, Quant Pro Professional Loader , Madness PRO DDoS",Oct 2018,Inactive,"Russian Federation, Eastern Europe",4,0,eCrime,Criminal
SLEEPY SAINT,Sep 2018,Inactive,Georgia,2,2,Targeted,State-Sponsored
"POTASSIUM, Cloud Hopper, HOGFISH, ChessMaster, APT10, menuPass, happyyongzi",Jul 2018,Retired,China,12,12,Targeted,State-Sponsored
"RASPITE, Leafminer",Jun 2018,Inactive,Iran,4,2,Targeted,State-Sponsored
"Group 72, Black Vine, WebMasters, APT19, Codoso, Webfans, PinkPanther, KungFu Kittens, BRONZE FIRESTONE, MadHatter",Jan 2018,Inactive,China,16,14,Targeted,State-Sponsored
Locky,Dec 2017,Inactive,"Russian Federation, Eastern Europe",1,0,eCrime,Criminal
Cerber,Dec 2017,Inactive,Russian Federation,0,0,eCrime,Criminal
Temp.Zhenbao,Dec 2017,Inactive,China,4,4,Targeted,State-Sponsored
Group 42,Nov 2017,Inactive,Iran,3,3,Targeted,State-Sponsored
"APT-12, Dyn Calc, DNS Port Calc, Ixeshi, Chainlink",Sep 2017,Inactive,China,4,4,Targeted,State-Sponsored
CoreBot,Jun 2017,Inactive,Russian Federation,1,5,eCrime,Criminal
"admin@338, MAGNESIUM",May 2017,Retired,China,7,3,Targeted,State-Sponsored
"Peacomm, Nuwar, Waledac, Hlux, Kelihos, Storm Worm",Apr 2017,Inactive,Russian Federation,0,0,eCrime,Criminal
"BORON, APT3, TG-0110, UPS",Apr 2017,Retired,China,10,4,Targeted,State-Sponsored
Shamoon,Dec 2016,Inactive,Iran,11,1,Targeted,State-Sponsored
Fallaga Team,Dec 2016,Retired,Tunisia,2,3,Targeted,Hacktivism
--,Sep 2016,Retired,China,3,6,Targeted,State-Sponsored
"APT-22, Winnti, LEAD",Jul 2016,Retired,China,1,8,eCrime,"State-Sponsored, Criminal"
LizardSquad,May 2016,Retired,United States,5,3,Targeted,Hacktivism
"TeslaCrypt, EccKrypt",May 2016,Inactive,Unknown,0,0,eCrime,Criminal
--,Feb 2016,Retired,China,1,2,Targeted,State-Sponsored
"DD4BC, Ambiorx",Jan 2016,Inactive,Unknown,2,8,eCrime,Criminal
"APT-2, MSUpdater, 4H Crew, SULPHUR",Jan 2016,Inactive,China,4,3,Targeted,State-Sponsored
"SODIUM, APT4, Getkys, Sykipot Group, Wkysol",Nov 2015,Inactive,China,2,1,Targeted,State-Sponsored
--,Oct 2015,Inactive,Unknown,3,5,eCrime,Criminal
Vikingdom,Aug 2015,Retired,United Arab Emirates,5,1,Targeted,Hacktivism
DragonOK,Jul 2015,Inactive,China,3,1,Targeted,State-Sponsored
"TG-0416, Nitro (Low Confidence), Wekby, APT18, SCANDIUM",Jul 2015,Inactive,China,7,3,Targeted,State-Sponsored
Gantengers Crew,Jun 2015,Retired,Indonesia,6,7,Targeted,Hacktivism
"Operation Aurora, Axiom, Group 72, HELIUM, BRONZE KEYSTONE, APT17, Deputy Dog, Tailgater, Ragebeast, LadyBoyle, Hidden Lynx",May 2015,Inactive,China,13,6,Targeted,State-Sponsored
ITSecTeam,Apr 2015,Inactive,Iran,2,0,Targeted,State-Sponsored
"Saffron Rose, Magic Hound",Feb 2015,Inactive,Iran,4,6,Targeted,State-Sponsored
Pitty Tiger,Dec 2014,Inactive,China,3,2,Targeted,State-Sponsored
--,Nov 2014,Inactive,Russian Federation,1,2,eCrime,Criminal
--,Nov 2014,Inactive,China,3,2,Targeted,State-Sponsored
--,Nov 2014,Inactive,China,1,1,Targeted,State-Sponsored
"TH3Bug, APT20",Nov 2014,Inactive,China,6,4,Targeted,State-Sponsored
"Operation Ababil, OpAbabil",Sep 2014,Retired,Iran,1,1,Targeted,State-Sponsored
--,Sep 2014,Inactive,China,1,1,Targeted,State-Sponsored
FIN4,Jul 2014,Inactive,Unknown,2,1,eCrime,Criminal
"Shylock, Caphaw",Jul 2014,Inactive,Russian Federation,1,1,eCrime,Criminal
"Saffron Rose, Ajax Security Team",Jun 2014,Inactive,Iran,7,2,Targeted,State-Sponsored
"Dragonfly, BROMINE, Crouching Yeti, Havex",Jun 2014,Retired,Russian Federation,8,18,Targeted,State-Sponsored
--,May 2014,Inactive,China,3,4,Targeted,State-Sponsored
--,Feb 2014,Retired,Russian Federation,1,8,Targeted,State-Sponsored
"APT9, Flowerlady/Flowershow",Dec 2013,Retired,China,3,2,Targeted,State-Sponsored
"APT1, Comment Crew, FLOURINE",Dec 2013,Inactive,China,13,14,Targeted,State-Sponsored
Tunisian Cyber Army,Sep 2013,Retired,Tunisia,5,1,Targeted,Hacktivism
Icefog,Jul 2013,Inactive,China,7,3,Targeted,State-Sponsored
"APT14, QAZ Team, ALUMINUM",Jul 2013,Inactive,China,5,11,Targeted,State-Sponsored
TeamSpy,May 2013,Retired,Russian Federation,0,15,Targeted,State-Sponsored
Google-blogspot (Sunshop Digital Quartermaster),Apr 2013,Retired,China,3,1,Targeted,State-Sponsored
--,Oct 2012,Retired,China,1,0,Targeted,State-Sponsored
--,Apr 2012,Inactive,China,1,1,Targeted,State-Sponsored
1 Alias Last Active Status Origin Target Industries Target Countries Actor Type Motivation
2 IntelBroker Jun 2024 Active Unknown 17 9 eCrime Criminal
3 PlayCrypt, PLAY Jun 2024 Active Unknown 31 35 eCrime Criminal
4 Royal, BlackSuit Jun 2024 Active Russian Federation 29 29 eCrime Criminal
5 LockBitSupp, LockBit Jun 2024 Active Russian Federation 44 103 eCrime Criminal
6 Akira Jun 2024 Active Unknown 29 38 eCrime Criminal
7 BianLian Jun 2024 Active Unknown 32 32 eCrime Criminal
8 INC, Nemty, Nemty X, Nefilim, GOLD MANSARD, Nokoyawa Jun 2024 Active Russian Federation, Eastern Europe 22 19 eCrime Criminal
9 nixploiter Jun 2024 Active Unknown 26 32 eCrime Criminal
10 hacking group Medusa, Medusa ransomware team, Medusa team Jun 2024 Active Unknown 27 39 eCrime Criminal
11 QBot, Quakbot, QakBot, PinkSlip, GOLD LAGOON, Qakbot Jun 2024 Active Russian Federation, Eastern Europe 23 13 eCrime Criminal
12 Vice Society, DEV-0832, Vanilla Tempest, Rhysida Jun 2024 Active Unknown 25 41 eCrime Criminal
13 -- Jun 2024 Active Unknown 25 33 eCrime Criminal
14 BOSS, Lions, AcidLow, exp3rt, brain, RedTeam, bigrichy, FASTPRISONER, Birdy, 5MRBID, Signature, 5BIRD, 8BASE, EightBase, SawGoD, REDTEAMDR, bigboss, reverse5net, RADAR, Dispossessor, RAID Jun 2024 Active Russian Federation, Eastern Europe 32 53 eCrime Criminal
15 FIN11, Clop Jun 2024 Active Russian Federation, Eastern Europe 37 48 eCrime Criminal
16 05716nnm, Nnm05716, NoName, NoName057 Jun 2024 Active Russian Federation 12 28 Targeted Hacktivism
17 Gamaredon, Trident Ursa, APT-C-53, UAC-0010, Blue Otso, WINTERFLOUNDER, TEMP.Armageddon, SpiceyHoney Campaign, IRON TILDEN, Operation Armageddon, ACTINIUM, UNC530, Shuckworm, Aqua Blizzard Jun 2024 Active Russian Federation 5 5 Targeted State-Sponsored
18 Lockean, UNC4393 Jun 2024 Active Unknown 22 19 eCrime Criminal
19 Storm-0216 Jun 2024 Active Unknown 24 17 eCrime Criminal
20 LUCR-3, Octo Tempest, Roasted 0ktapus, Scatter Swine, UNC3944, Storm-0875 Jun 2024 Active Unknown 21 14 eCrime Criminal
21 -- Jun 2024 Active Unknown 9 7 eCrime Criminal
22 FIN13, Elephant Beetle Jun 2024 Active Unknown 2 4 eCrime Criminal
23 Operation Layover, TA2541 Jun 2024 Active Nigeria 3 0 eCrime Criminal
24 Taurus Loader TeamViewer Module, Taurus Loader Reconnaissance Module, Taurus Loader Ransomware Module, Golden Chickens, SKID, VenomKit, Taurus Loader, Taurus Loader Stealer Module Jun 2024 Active Canada, Moldova 0 0 eCrime Criminal
25 Temp.Isotope, IRON LIBERTY, BROMINE, Ghost Blizzard, ALLANITE, DYMALLOY, Dragonfly 2.0 Jun 2024 Active Russian Federation 23 41 Targeted State-Sponsored
26 TA558 Jun 2024 Active Brazil 4 8 eCrime Criminal
27 Daixin Team Jun 2024 Active Unknown 5 4 eCrime Criminal
28 APT-C-36, Blind Eagle Jun 2024 Active Colombia 9 3 eCrime Criminal
29 -- Jun 2024 Active Unknown 3 29 eCrime Criminal
30 -- Jun 2024 Active Brazil 6 10 eCrime Criminal
31 UNC961 Jun 2024 Active Unknown 9 3 eCrime Criminal
32 Retefe Jun 2024 Active Russian Federation, Eastern Europe 3 31 eCrime Criminal
33 STRONTIUM, Tsar-Team, SNAKEMACKEREL, Tsar Team, Pawn Storm, Sofacy, TG-4127, Fighting Ursa, Forest Blizzard, APT28, Swallowtail, FROZENLAKE, Zebrocy, Sednit, Iron Twilight, UAC-0028, Sofacy Group Jun 2024 Active Russian Federation 13 31 Targeted State-Sponsored
34 Atomic MacOS Stealer, AMOS, ping3r Jun 2024 Active Unknown 0 0 eCrime Criminal
35 eugenfest, Payk_34 Jun 2024 Active Unknown 0 0 eCrime Criminal
36 Amadey, a2019, a2022, inCrease Jun 2024 Active Unknown 0 0 eCrime Criminal
37 PrivateLoader Jun 2024 Active Russian Federation, Eastern Europe, Central Asia 1 0 eCrime Criminal
38 -- Jun 2024 Active Unknown 0 0 eCrime Criminal
39 STRRAT, Strigoi Master Jun 2024 Active Unknown 0 0 eCrime Criminal
40 DanaBot Jun 2024 Active Russian Federation, Eastern Europe 12 6 eCrime Criminal
41 Bitter APT, Orange Yali May 2024 Active India 6 4 Targeted State-Sponsored
42 BackDoorDiplomacy May 2024 Active China, East Asia 1 10 Targeted State-Sponsored
43 -- May 2024 Active Unknown 4 1 eCrime Criminal
44 Cerium, APT43, Konni, TA406, Osmium, Springtail, Black Banshee, Opal Sleet, Emerald Sleet, Thallium, TA408, TA427, Crooked Pisces, SharpTongue, Ruby Sleet, Kimsuky May 2024 Active North Korea 18 12 Targeted State-Sponsored
45 APT38, Leery Turtle, Sapphire Sleet, Lazarus Group, HIDDEN COBRA, CryptoCore, COPERNICIUM, TAG-71, BeagleBoyz, Bluenoroff, CageyChameleon, CryptoMimic, Dangerous Password, TA444 May 2024 Active North Korea 4 37 Targeted State-Sponsored, Criminal
46 mr._D0n#T, Donut, x4k, Mr.D0nut May 2024 Active Unknown 16 15 eCrime Criminal
47 kalin3t, Holy Souls, Black Magic, AMC239, Atlas Group, Hackers of Savior, Sangkancil, Yooz E Cybery, Yare Gomnam Cyber Team, Deus, NEPTUNIUM, Generous Thief, Al-Toufan May 2024 Active Iran 9 3 Targeted State-Sponsored
48 GREF, TG-2633, BRONZE ATLAS, Brass Typhoon, Winnti, Group 72, BARIUM, LEAD, APT41 May 2024 Active China 22 9 Targeted State-Sponsored
49 Br0k3r May 2024 Active Unknown 23 26 eCrime Criminal
50 IcedID, BokBot, GOLD SWATHMORE May 2024 Active Russian Federation, Eastern Europe 2 7 eCrime Criminal
51 Earth Hundun, BlackTech, COBALT, Palmerworm, WaterBear, Red Djinn May 2024 Active China 7 5 Targeted State-Sponsored
52 Andariel, Lazarus, New Romanic Cyber Army, PLUTONIUM, Onyx Sleet May 2024 Active North Korea 22 18 Targeted State-Sponsored, Criminal
53 Smoke Loader, Dofoil, Smoke Bot May 2024 Active Russian Federation, Eastern Europe 1 0 eCrime Criminal
54 NilePhish May 2024 Active Egypt 3 2 Targeted State-Sponsored
55 RedFoxtrot Apr 2024 Active China 7 8 Targeted State-Sponsored
56 Flax Typhoon Apr 2024 Active China 5 5 Targeted State-Sponsored
57 UNC577, UNC4736, Jade Sleet, BeagleBoyz, Lazarus Group, Diamond Sleet, APT-C-26, TEMP.Hermit, Moonstone Sleet, HIDDEN COBRA, Black Artemis, Zinc, UNC2970 Apr 2024 Active North Korea 24 31 Targeted State-Sponsored
58 Hazel Sandstorm, Homeland Justice, DEV-0842 , Void Manticore Apr 2024 Active Iran 3 2 Targeted State-Sponsored
59 LuoYu, Storm-0601 Apr 2024 Active China 7 4 Targeted State-Sponsored
60 Matanbuchus, BelialDemon Apr 2024 Active Unknown 0 0 eCrime Criminal
61 Kukacka, Sality, KuKu, SalLoad, Kookoo, SaliCode Apr 2024 Active Russian Federation 1 2 eCrime Criminal
62 COLDRIVER, SEABORGIUM, DancingSalome, TAG-53, Blue Callisto, Calisto, Star Blizzard, Callisto Apr 2024 Active Russian Federation 6 4 Targeted State-Sponsored
63 Fsociety, CryptersAndTools Apr 2024 Active Brazil 0 0 eCrime Criminal
64 Desorden Group Apr 2024 Active Unknown 7 8 eCrime Criminal
65 Reaper, ScarCruft, Group123, TEMP.Reaper, Venus121, ITG10, APT37, Red Eyes, Inky Squid, Moldy Pisces Apr 2024 Active North Korea 10 5 Targeted State-Sponsored
66 YoroTrooper, Tomiris, SturgeonPhisher Apr 2024 Active Unknown 0 0 Targeted State-Sponsored
67 HoneyMyte, Temp.Hex, UNC1066, BRONZE PRESIDENT, Stately Taurus Mar 2024 Active China 5 6 Targeted State-Sponsored
68 -- Mar 2024 Active Unknown 1 0 eCrime Criminal
69 Temp.Zagros, MERCURY, Seedworm, Yellow Nix, Mango Sandstorm, MuddyWater, NTSTATS, POWERSTATS Mar 2024 Active Iran 15 20 Targeted State-Sponsored
70 SANDFISH, ELECTRUM, Quedagh, IRON VIKING, Blue Echidna, Telebots, Sunglow Blizzard, IRIDIUM, Seashell Blizzard, Sandworm, Hades, BlackEnergy Group, FROZENBARENTS, UAC-0082, DEV-0665 Mar 2024 Active Russian Federation 8 10 Targeted State-Sponsored
71 Xe Group, XeGroup Mar 2024 Active Vietnam 1 0 eCrime Criminal
72 -- Mar 2024 Active Unknown 0 0 eCrime Criminal
73 NOBERUS, ALPHV, BlackCat Mar 2024 Active Unknown 30 37 eCrime Criminal
74 Confucious, Confucius, Orange Dev 1 Mar 2024 Active Unknown 2 1 Targeted State-Sponsored
75 Rattlesnake, T-APT-04, APT-C-17, APT-Q-39, Sidewinder, Baby Elephant, Operation Origami, Rattlesnake, Hardcore Nationalist Mar 2024 Active India 11 7 Targeted State-Sponsored
76 RedAlpha, Red Dev 3, DeepCliff Mar 2024 Active Unknown 5 6 Targeted State-Sponsored
77 Red Scully, Charcoal Typhoon, CHROMIUM, TAG-22, ControlX, BountyGlad, BRONZE UNIVERSITY Feb 2024 Active China 18 15 Targeted State-Sponsored
78 Office Monkeys, CozyCar, Midnight Blizzard, IRON RITUAL, YTTRIUM, NOBELIUM, IRON HEMLOCK, Blue Kitsune, JACKMACKEREL, APT29, “The Dukes”, UAC-0029, The Dukes, CozyDuke, Cloaked Ursa Feb 2024 Active Russian Federation 14 21 Targeted State-Sponsored
79 Bugat, Hades, Group: Evil Corp, iEncrypt, EvilCorp, PAYLOADBIN, Manatee Tempest, Friedex, BitPaymer, Dridex, WastedLocker, Phoenix Cryptolocker, GOLD DRAKE, GOLD WINTER Feb 2024 Active Russian Federation, Eastern Europe 24 11 eCrime Criminal
80 UAC-0050 Feb 2024 Active Russian Federation 5 4 eCrime State-Sponsored, Hacktivism, Criminal
81 -- Feb 2024 Active India 4 5 Targeted State-Sponsored
82 Volt Typhoon, BRONZE SILHOUETTE Feb 2024 Active China 14 1 Targeted State-Sponsored
83 Patchwork, Chinastrats, Monsoon, APT-C-09, Dropping Elephant, Orange Athos Feb 2024 Active India 9 6 Targeted State-Sponsored
84 Sea Turtle, SILICON, UNC1326, Marbled Dust Jan 2024 Active Turkey 5 16 Targeted State-Sponsored
85 -- Jan 2024 Active Iran 9 2 Targeted State-Sponsored
86 APT35, CURIUM, Smoke Sandstorm, DEV-0228, Crimson Sandstorm, Cuboid Sandstorm, Tortoiseshell, Yellow Liderc, DEV-0056 Jan 2024 Active Iran 7 5 Targeted State-Sponsored
87 TIN WOODLAWN, Scarlet Ioke, Dark Pink, Saaiwc Group, APT-LY-1005, OceanLotus, SeaLotus, APT32 Jan 2024 Active Vietnam 12 8 Targeted State-Sponsored
88 Donot, Orange Kala, Operation Hangover, Appin, APT-C-35 Jan 2024 Active India 9 18 Targeted State-Sponsored
89 KRYPTON, Waterbug, Blue Python, Uroboros, Snake, Turla, IRON HUNTER, BELUGASTURGEON, SUMMIT, Secret Blizzard Dec 2023 Active Russian Federation 6 43 Targeted State-Sponsored
90 Cyber Partisans Dec 2023 Active Unknown 6 1 Targeted Hacktivism
91 Lorenz Dec 2023 Active Unknown 21 11 eCrime Criminal
92 STORM-0866, Red Dev 40, Sandman APT Dec 2023 Active China 2 2 Targeted State-Sponsored
93 COPPER FIELDSTONE, Green Havildar, APT36, Transparent Tribe, C-Major, Transparent Tribe, C-Major, ProjectM Dec 2023 Active Pakistan 8 4 Targeted State-Sponsored
94 Greenbug Nov 2023 Active Iran 2 2 Targeted State-Sponsored
95 CHRYSENE, OilRig, Helminth, APT34, ITG13, Hazel Sandstorm, EUROPIUM, Greenbug, Clayslide, IRN2, COBALT GYPSY Nov 2023 Active Iran 12 15 Targeted State-Sponsored
96 PHOSPHORUS, TA453, Newscaster, Parastoo, APT35, Mint Sandstorm, UNC788, COBALT ILLUSION, APT42 Oct 2023 Active Iran 14 8 Targeted State-Sponsored
97 ChamelGang Oct 2023 Active China 7 5 Targeted State-Sponsored
98 Abraham's Ax, Marigold Sandstorm, DEV-500, Moses Staff Oct 2023 Active Iran 11 2 Targeted State-Sponsored
99 Ayyıldız Tim Oct 2023 Active Turkey 5 4 Targeted Hacktivism
100 Storm-0861, Scarred Manticore Oct 2023 Active Iran 6 8 Targeted State-Sponsored
101 GREATRIFT, Plaid Rain, POLONIUM, UNC4453 Oct 2023 Active Lebanon 4 2 Targeted State-Sponsored
102 -- Oct 2023 Active China 11 4 Targeted State-Sponsored
103 Ragnar Locker Oct 2023 Active Eastern Europe 21 9 eCrime Criminal
104 AnonGhost Oct 2023 Active Unknown 7 13 Targeted Hacktivism
105 DarkRypt, Pink Sandstorm, AMERICIUM, Agrius, Black Shadow Oct 2023 Active Iran 10 2 Targeted State-Sponsored
106 SideCopy, Operation SideCopy Oct 2023 Active Pakistan 3 2 Targeted State-Sponsored
107 Arid Viper, APT-C-23, Grey Karkadann, Mantis, Pinstripe Lightning Oct 2023 Active Palestine 3 3 Targeted State-Sponsored
108 APT27, HIPPO Team, BRONZE UNION, TG-3390, Lucky Mouse, UNC215 Oct 2023 Active China 10 8 Targeted State-Sponsored
109 -- Sep 2023 Active China 5 3 Targeted State-Sponsored
110 Evilnum, DeathStalker, TA4563 Sep 2023 Active Unknown 4 4 eCrime Criminal
111 APT39, ITG07, COBALT HICKMAN, Storm-0589, Chafer, Cadelle Sep 2023 Active Iran 5 9 Targeted State-Sponsored
112 -- Sep 2023 Active Unknown 1 0 eCrime Criminal
113 r1z Sep 2023 Active Unknown 0 0 eCrime Criminal
114 alfredoaa, IlonMask, efw, StreetSkip, Viking, farnetwork, farcat, EronM, Network Sep 2023 Active Unknown 18 18 eCrime Criminal
115 GALLIUM, Soft Cell, Alloy Taurus, Granite Typhoon Sep 2023 Active China 4 4 Targeted State-Sponsored
116 Molerats, Gaza Hacker Team, Gaza Cybergang, Aluminum Saratoga Aug 2023 Active Palestine 3 8 Targeted State-Sponsored
117 Earth Estries Aug 2023 Active China 4 1 Targeted State-Sponsored
118 -- Aug 2023 Active China 3 6 Targeted State-Sponsored
119 HEXANE, Lyceum, COBALT LYCEUM, SiameseKitten Jul 2023 Active Iran 6 5 Targeted State-Sponsored
120 RedDelta, Tantalum Jul 2023 Active China 2 2 Targeted State-Sponsored
121 drumrlu, 3lv4n, @elvan_tarak Jul 2023 Active Turkey 22 34 eCrime Criminal
122 Vatet, Defray, Defray 2018, Target777, PyXie, GOLD DUPONT, Defray777, Shifu Jul 2023 Active Unknown 27 26 eCrime Criminal
123 APT-C-37, APT-C-27, Syrian Electronic Army, SEA, Golden Mouse Jun 2023 Active Syrian Arab Republic 3 3 Targeted State-Sponsored
124 Lotus Blossom, Thrip, Billbug, Elise Jun 2023 Active China 8 8 Targeted State-Sponsored
125 Bax026 May 2023 Active Iran 7 3 Targeted Hacktivism, Criminal
126 KelvinSecTeam, KelvinSecurityTeam, KelvinSecurity Apr 2023 Active Venezuela 16 23 Targeted Criminal, Hacktivism
127 Lorec53, Cadet Blizzard, UAC-0056, Lorec Bear, Bleeding Bear, Saint Bear, Nascent Ursa, UNC2589, Frozen Vista, DEV-0586 Apr 2023 Active Russian Federation 3 4 Targeted State-Sponsored
128 Phosphorus, DEV-0270, COBALT MIRAGE, UNC2448 Mar 2023 Active Iran 19 6 Targeted State-Sponsored
129 Emotet, Geodo, GOLD CRESTWOOD, TA542 Feb 2023 Inactive Russian Federation, Eastern Europe 7 12 eCrime Criminal
130 EXOTIC LILY, TA580, Projector Libra Feb 2023 Inactive Unknown 1 7 eCrime Criminal
131 GlobeImposter, PSCrypt, a11chemist, helter, A1Lock Feb 2023 Inactive Russian Federation 5 5 eCrime Criminal
132 El Machete, APT-C-43 Feb 2023 Active Colombia 3 8 Targeted State-Sponsored
133 Hive Jan 2023 Inactive Unknown 21 20 eCrime Criminal
134 NICKEL, Red Vulture, BRONZE PALACE, DiplomaticDuck, Nylon Typhoon, APT15, Mirage, ke3chang Dec 2022 Active China 6 24 Targeted State-Sponsored
135 APT5, Comfoo, BRONZE FLEETWOOD, Poisoned Flight, DPD, Mulberry Typhoon, MANGANESE, Temp.Bottle, TG-2754 Dec 2022 Active China 6 1 Targeted State-Sponsored
136 Quantum, AstroLocker, XingLocker, MountLocker, SunRiseLocker Nov 2022 Inactive Unknown 22 21 eCrime Criminal
137 Cutwail, 0bulk, Psych, R4, Evolution R4, GOLD ESSEX, Cutwail (v2), 0bulk Psych Evolution R4 Nov 2022 Inactive Russian Federation, Eastern Europe 2 4 eCrime Criminal
138 TotBrick, Conti, BazarLoader, TrickBoot, FIN12, Periwinkle Tempest, TrickLoader, Kegtap, TheTrick, UNC1878, TrickBot, Ryuk, Anchor DNS, GOLD ULRICK Nov 2022 Inactive Russian Federation, Eastern Europe 39 42 eCrime Criminal
139 ELBRUS, Sangria Tempest, FIN7, GOLD NIAGARA, GOLD WATERFALL, ITG14, Carbanak Nov 2022 Active Russian Federation, Ukraine 29 35 eCrime Criminal
140 LAPSUS, Strawberry Tempest, Lapsus$ Group, Lapsus$ May 2022 Inactive Unknown 8 5 eCrime Criminal
141 Cabassous, FluBot, Cabossous, FakeChat May 2022 Inactive Eastern Europe 1 10 eCrime Criminal
142 ICTUS Team, Tapesh Security Team, BiskooitPedar, Cyber Avengers May 2022 Inactive Iran 2 4 Targeted Hacktivism
143 Zloader, Silent Night, DELoader, Terdot Mar 2022 Inactive Unknown 1 0 eCrime Criminal
144 PARISITE, UNC757, Fox Kitten, Yellow Dev 15, COBALT FOXGLOVE, Lemon Sandstorm Mar 2022 Active Iran 16 2 Targeted State-Sponsored
145 GOLD HERON Feb 2022 Retired Russian Federation, Eastern Europe 31 32 eCrime Criminal
146 RobbinHood Feb 2022 Retired Unknown 4 3 eCrime Criminal
147 DeathKitty, DeathRansom, HelloKitty, HellKitty, FiveHands Jan 2022 Retired Unknown 6 5 eCrime Criminal
148 FunnyDream Jan 2022 Active China 2 3 Targeted State-Sponsored
149 ServHelper, HRDP, La_Citrix, X3_Mazafaka Dec 2021 Inactive Unknown 1 0 eCrime Criminal
150 Pysa, Mespinoza, GOLD BURLAP Dec 2021 Inactive Unknown 31 34 eCrime Criminal
151 Circle Typhoon Dec 2021 Active Unknown 7 2 Targeted Unknown
152 -- Nov 2021 Active Unknown 1 1 Targeted State-Sponsored
153 Unidentified Team Nov 2021 Inactive Iran 3 2 Targeted Hacktivism
154 Temp.Periscope, Temp.Jumper, Leviathan, APT40, GADOLINIUM, Mudcarp, Gingham Typhoon Nov 2021 Active China 14 14 Targeted State-Sponsored
155 APT23, KeyBoy, Tropic Trooper Nov 2021 Active China 6 6 Targeted State-Sponsored
156 Sodinokibi, GOLD GARDEN, GOLD SOUTHFIELD, GandCrab, REvil Oct 2021 Inactive Russian Federation, Eastern Europe 34 39 eCrime Criminal
157 MysticChess, CactusPete, Tonto Team, Earth Akhlut, Jennifer Group, Bronze Huntley, LoneRanger Sep 2021 Active China 6 6 Targeted State-Sponsored
158 Elfin, Magnallium, HOLMIUM, COBALT TRINITY, Peach Sandstorm, APT33 Jul 2021 Active Iran 5 3 Targeted State-Sponsored
159 APT-C-06, DarkHotel, Tapaoux, Fallout Team, DUBNIUM Jun 2021 Active South Korea 7 6 Targeted State-Sponsored
160 Avaddon Jun 2021 Inactive Unknown 32 40 eCrime Criminal
161 TinyLoader, TinyPoS, Tiny Utils Apr 2021 Inactive Russian Federation, Eastern Europe 2 5 eCrime Criminal
162 Silent Librarian, Cobalt Dickens, Yellow Nabu, TA407, Mabna Institute Mar 2021 Active Iran 1 21 Targeted State-Sponsored
163 BRONZE VINEWOOD, Chameleon, MrsDash, Violet Typhoon, APT31, ZIRCONIUM Mar 2021 Active China 12 2 Targeted State-Sponsored
164 Maze Team, Maze, Egregor, Egregor Team, GOLD PHANTOM, GOLD VILLAGE Feb 2021 Inactive Russian Federation, Eastern Europe 33 40 eCrime Criminal
165 Naikon, Camerashy Feb 2021 Active China 4 10 Targeted State-Sponsored
166 Mailto2, KoKo, Netwalker, and KoKo, KazKavKovKiz, Mailto Jan 2021 Inactive Russian Federation, Eastern Europe 27 26 eCrime Criminal
167 -- Jan 2021 Active China 7 4 Targeted State-Sponsored
168 CageyChameleon, CryptoCore, CryptoMimic, Dangerous Password, Sapphire Sleet Dec 2020 Retired North Korea 3 4 eCrime State-Sponsored, Criminal
169 EmpireMonkey Nov 2020 Retired Unknown 6 3 eCrime Criminal
170 xHunt, Sakabota, COBALT KATANA Aug 2020 Active Iran 3 1 Targeted State-Sponsored
171 La Nueve de Anon, La9 Jul 2020 Inactive Spain 5 1 Targeted Hacktivism
172 Red Hackers Association, RedHack Jun 2020 Inactive Turkey 5 2 Targeted Unknown
173 Qademoun Jun 2020 Inactive Lebanon 5 1 Targeted Hacktivism
174 Ruthenium Apr 2020 Inactive China 6 4 Targeted State-Sponsored
175 Syrian Electronic Army Mar 2020 Retired Syrian Arab Republic 6 6 Targeted State-Sponsored
176 Phineas Fisher, Subcowmandante Marcos Feb 2020 Inactive Unknown 6 6 Targeted Hacktivism
177 Silence Group, TrueBot Feb 2020 Inactive Russian Federation, Eastern Europe 2 3 eCrime Criminal
178 Cobalt Group, Cobalt Gang, GOLD KINGSWOOD, Mule Libra Feb 2020 Inactive Unknown 3 14 eCrime Criminal
179 FIN6, ITG08, GOLD FRANKLIN, Camouflage Tempest, FrameworkPoS, Trinity Jun 2019 Inactive Russian Federation, Eastern Europe 2 1 eCrime Criminal
180 Eredel and Supreme ++, Nocturnal Stealer, Arkei Stealer, Rarog, Eredel, Supreme ++ May 2019 Inactive Russian Federation 0 0 eCrime Criminal
181 Ryuk May 2019 Retired Russian Federation, Eastern Europe 7 3 eCrime Criminal
182 TA505, CraP2P, Necurs spam botnet Apr 2019 Inactive Russian Federation, Eastern Europe 2 0 eCrime Criminal
183 Tick, BRONZE BUTLER, Redbaldknight Mar 2019 Retired China 5 4 Targeted State-Sponsored
184 The Dark Overlord Jan 2019 Inactive United States 6 1 eCrime Criminal
185 Taidoor Jan 2019 Inactive China 4 3 Targeted State-Sponsored
186 GOLD LOWELL, Samas, SamSam, Samsa, SamsamCrypt Nov 2018 Inactive Iran 5 1 eCrime Criminal
187 APT26 Oct 2018 Inactive China 3 1 Targeted State-Sponsored
188 Buhtrap Oct 2018 Inactive Russian Federation 1 2 eCrime Criminal
189 Cutwail (v1), 0bulk Psyche Evolution R4 Oct 2018 Inactive Russian Federation, Eastern Europe 1 0 eCrime Criminal
190 Panda Banker, Panda Zeus Oct 2018 Inactive Russian Federation, Eastern Europe 6 9 eCrime Criminal
191 z*Stealer, MKL Keylogger, MBS Bitcoin Stealer, CPPGURU, C++ GURU, sw^team, Quant Pro Professional Loader , Madness PRO DDoS Oct 2018 Inactive Russian Federation, Eastern Europe 4 0 eCrime Criminal
192 SLEEPY SAINT Sep 2018 Inactive Georgia 2 2 Targeted State-Sponsored
193 POTASSIUM, Cloud Hopper, HOGFISH, ChessMaster, APT10, menuPass, happyyongzi Jul 2018 Retired China 12 12 Targeted State-Sponsored
194 RASPITE, Leafminer Jun 2018 Inactive Iran 4 2 Targeted State-Sponsored
195 Group 72, Black Vine, WebMasters, APT19, Codoso, Webfans, PinkPanther, KungFu Kittens, BRONZE FIRESTONE, MadHatter Jan 2018 Inactive China 16 14 Targeted State-Sponsored
196 Locky Dec 2017 Inactive Russian Federation, Eastern Europe 1 0 eCrime Criminal
197 Cerber Dec 2017 Inactive Russian Federation 0 0 eCrime Criminal
198 Temp.Zhenbao Dec 2017 Inactive China 4 4 Targeted State-Sponsored
199 Group 42 Nov 2017 Inactive Iran 3 3 Targeted State-Sponsored
200 APT-12, Dyn Calc, DNS Port Calc, Ixeshi, Chainlink Sep 2017 Inactive China 4 4 Targeted State-Sponsored
201 CoreBot Jun 2017 Inactive Russian Federation 1 5 eCrime Criminal
202 admin@338, MAGNESIUM May 2017 Retired China 7 3 Targeted State-Sponsored
203 Peacomm, Nuwar, Waledac, Hlux, Kelihos, Storm Worm Apr 2017 Inactive Russian Federation 0 0 eCrime Criminal
204 BORON, APT3, TG-0110, UPS Apr 2017 Retired China 10 4 Targeted State-Sponsored
205 Shamoon Dec 2016 Inactive Iran 11 1 Targeted State-Sponsored
206 Fallaga Team Dec 2016 Retired Tunisia 2 3 Targeted Hacktivism
207 -- Sep 2016 Retired China 3 6 Targeted State-Sponsored
208 APT-22, Winnti, LEAD Jul 2016 Retired China 1 8 eCrime State-Sponsored, Criminal
209 LizardSquad May 2016 Retired United States 5 3 Targeted Hacktivism
210 TeslaCrypt, EccKrypt May 2016 Inactive Unknown 0 0 eCrime Criminal
211 -- Feb 2016 Retired China 1 2 Targeted State-Sponsored
212 DD4BC, Ambiorx Jan 2016 Inactive Unknown 2 8 eCrime Criminal
213 APT-2, MSUpdater, 4H Crew, SULPHUR Jan 2016 Inactive China 4 3 Targeted State-Sponsored
214 SODIUM, APT4, Getkys, Sykipot Group, Wkysol Nov 2015 Inactive China 2 1 Targeted State-Sponsored
215 -- Oct 2015 Inactive Unknown 3 5 eCrime Criminal
216 Vikingdom Aug 2015 Retired United Arab Emirates 5 1 Targeted Hacktivism
217 DragonOK Jul 2015 Inactive China 3 1 Targeted State-Sponsored
218 TG-0416, Nitro (Low Confidence), Wekby, APT18, SCANDIUM Jul 2015 Inactive China 7 3 Targeted State-Sponsored
219 Gantengers Crew Jun 2015 Retired Indonesia 6 7 Targeted Hacktivism
220 Operation Aurora, Axiom, Group 72, HELIUM, BRONZE KEYSTONE, APT17, Deputy Dog, Tailgater, Ragebeast, LadyBoyle, Hidden Lynx May 2015 Inactive China 13 6 Targeted State-Sponsored
221 ITSecTeam Apr 2015 Inactive Iran 2 0 Targeted State-Sponsored
222 Saffron Rose, Magic Hound Feb 2015 Inactive Iran 4 6 Targeted State-Sponsored
223 Pitty Tiger Dec 2014 Inactive China 3 2 Targeted State-Sponsored
224 -- Nov 2014 Inactive Russian Federation 1 2 eCrime Criminal
225 -- Nov 2014 Inactive China 3 2 Targeted State-Sponsored
226 -- Nov 2014 Inactive China 1 1 Targeted State-Sponsored
227 TH3Bug, APT20 Nov 2014 Inactive China 6 4 Targeted State-Sponsored
228 Operation Ababil, OpAbabil Sep 2014 Retired Iran 1 1 Targeted State-Sponsored
229 -- Sep 2014 Inactive China 1 1 Targeted State-Sponsored
230 FIN4 Jul 2014 Inactive Unknown 2 1 eCrime Criminal
231 Shylock, Caphaw Jul 2014 Inactive Russian Federation 1 1 eCrime Criminal
232 Saffron Rose, Ajax Security Team Jun 2014 Inactive Iran 7 2 Targeted State-Sponsored
233 Dragonfly, BROMINE, Crouching Yeti, Havex Jun 2014 Retired Russian Federation 8 18 Targeted State-Sponsored
234 -- May 2014 Inactive China 3 4 Targeted State-Sponsored
235 -- Feb 2014 Retired Russian Federation 1 8 Targeted State-Sponsored
236 APT9, Flowerlady/Flowershow Dec 2013 Retired China 3 2 Targeted State-Sponsored
237 APT1, Comment Crew, FLOURINE Dec 2013 Inactive China 13 14 Targeted State-Sponsored
238 Tunisian Cyber Army Sep 2013 Retired Tunisia 5 1 Targeted Hacktivism
239 Icefog Jul 2013 Inactive China 7 3 Targeted State-Sponsored
240 APT14, QAZ Team, ALUMINUM Jul 2013 Inactive China 5 11 Targeted State-Sponsored
241 TeamSpy May 2013 Retired Russian Federation 0 15 Targeted State-Sponsored
242 Google-blogspot (Sunshop Digital Quartermaster) Apr 2013 Retired China 3 1 Targeted State-Sponsored
243 -- Oct 2012 Retired China 1 0 Targeted State-Sponsored
244 -- Apr 2012 Inactive China 1 1 Targeted State-Sponsored