MITRE ATT&CK
Threat Actors
176 intrusion sets with their techniques and malware. Origin is an assessed attribution from public reporting. Each actor page lists live news coverage matched by name or alias.
Intrusion sets
176
Attributed
11
Countries
4
Unattributed
165
China
5 groups- Winnti GroupG0044aka Blackfly6 techniques · 3 malware
- menuPassG0045aka Cicada, POTASSIUM, Stone Panda46 techniques · 25 malware
- APT41G0096aka Wicked Panda, Brass Typhoon, BARIUM82 techniques · 32 malware
- Volt TyphoonG1017aka BRONZE SILHOUETTE, Vanguard Panda, DEV-039181 techniques · 17 malware
- Salt TyphoonG104514 techniques · 1 malware
Russia
3 groupsIran
2 groupsNorth Korea
1 groupUnattributed
165 groups- AxiomG0001aka Group 7216 techniques · 8 malware
- MoafeeG00021 techniques · 1 malware
- CleaverG0003aka Threat Group 2889, TG-28895 techniques · 4 malware
- Ke3changG0004aka APT15, Mirage, Vixen Panda46 techniques · 11 malware
- APT12G0005aka IXESHE, DynCalc, Numbered Panda5 techniques · 3 malware
- APT1G0006aka Comment Crew, Comment Group, Comment Panda23 techniques · 17 malware
- CarbanakG0008aka Anunak9 techniques · 4 malware
- Deep PandaG0009aka Shell Crew, WebMasters, KungFu Kittens10 techniques · 7 malware
- TurlaG0010aka IRON HUNTER, Group 88, Waterbug68 techniques · 30 malware
- PittyTigerG00112 techniques · 5 malware
- DarkhotelG0012aka DUBNIUM, Zigzag Hail24 techniques
- APT30G00132 techniques · 5 malware
- DragonOKG00170 techniques · 2 malware
- admin@338G001812 techniques · 7 malware
- NaikonG001914 techniques · 15 malware
- EquationG00204 techniques
- MoleratsG0021aka Operation Molerats, Gaza Cybergang16 techniques · 6 malware
- APT3G0022aka Gothic Panda, Pirpi, UPS Team44 techniques · 6 malware
- APT16G00231 techniques · 1 malware
- Putter PandaG0024aka APT2, MSUpdater4 techniques · 4 malware
- APT17G0025aka Deputy Dog2 techniques · 1 malware
- APT18G0026aka TG-0416, Dynamite Panda, Threat Group-041612 techniques · 5 malware
- Threat Group-3390G0027aka Earth Smilodon, TG-3390, Emissary Panda57 techniques · 24 malware
- Threat Group-1314G0028aka TG-13144 techniques · 2 malware