MITRE ATT&CK
Threat Actors
176 intrusion sets with their techniques and malware. Origin is an assessed attribution from public reporting. Each actor page lists live news coverage matched by name or alias.
Intrusion sets
176
Attributed
11
Countries
4
Unattributed
165
China
5 groups- Winnti GroupG0044aka Blackfly6 techniques · 3 malware
- menuPassG0045aka Cicada, POTASSIUM, Stone Panda46 techniques · 25 malware
- APT41G0096aka Wicked Panda, Brass Typhoon, BARIUM82 techniques · 32 malware
- Volt TyphoonG1017aka BRONZE SILHOUETTE, Vanguard Panda, DEV-039181 techniques · 17 malware
- Salt TyphoonG104514 techniques · 1 malware
Russia
3 groupsIran
2 groupsNorth Korea
1 groupUnattributed
165 groups- AxiomG0001aka Group 7216 techniques · 8 malware
- MoafeeG00021 techniques · 1 malware
- CleaverG0003aka Threat Group 2889, TG-28895 techniques · 4 malware
- Ke3changG0004aka APT15, Mirage, Vixen Panda46 techniques · 11 malware
- APT12G0005aka IXESHE, DynCalc, Numbered Panda5 techniques · 3 malware
- APT1G0006aka Comment Crew, Comment Group, Comment Panda23 techniques · 17 malware
- CarbanakG0008aka Anunak9 techniques · 4 malware
- Deep PandaG0009aka Shell Crew, WebMasters, KungFu Kittens10 techniques · 7 malware
- TurlaG0010aka IRON HUNTER, Group 88, Waterbug68 techniques · 30 malware
- PittyTigerG00112 techniques · 5 malware
- DarkhotelG0012aka DUBNIUM, Zigzag Hail24 techniques
- APT30G00132 techniques · 5 malware
- DragonOKG00170 techniques · 2 malware
- admin@338G001812 techniques · 7 malware
- NaikonG001914 techniques · 15 malware
- EquationG00204 techniques
- MoleratsG0021aka Operation Molerats, Gaza Cybergang16 techniques · 6 malware
- APT3G0022aka Gothic Panda, Pirpi, UPS Team44 techniques · 6 malware
- APT16G00231 techniques · 1 malware
- Putter PandaG0024aka APT2, MSUpdater4 techniques · 4 malware
- APT17G0025aka Deputy Dog2 techniques · 1 malware
- APT18G0026aka TG-0416, Dynamite Panda, Threat Group-041612 techniques · 5 malware
- Threat Group-3390G0027aka Earth Smilodon, TG-3390, Emissary Panda57 techniques · 24 malware
- Threat Group-1314G0028aka TG-13144 techniques · 2 malware
- Scarlet MimicG00291 techniques · 4 malware
- Lotus BlossomG0030aka DRAGONFISH, Spring Dragon, RADIUM21 techniques · 9 malware
- Poseidon GroupG00338 techniques
- DragonflyG0035aka TEMP.Isotope, DYMALLOY, Berserk Bear56 techniques · 10 malware
- GCMANG00362 techniques
- FIN6G0037aka Magecart Group 6, ITG08, Skeleton Spider40 techniques · 12 malware
- Stealth FalconG003816 techniques
- SuckflyG00395 techniques · 1 malware
- PatchworkG0040aka Hangover Group, Dropping Elephant, Chinastrats41 techniques · 8 malware
- StriderG0041aka ProjectSauron3 techniques · 1 malware
- Group5G00434 techniques · 2 malware
- FIN7G0046aka GOLD NIAGARA, ITG14, Carbon Spider67 techniques · 19 malware
- Gamaredon GroupG0047aka IRON TILDEN, Primitive Bear, ACTINIUM70 techniques · 6 malware
- RTMG00487 techniques · 1 malware
- OilRigG0049aka COBALT GYPSY, IRN2, APT3476 techniques · 30 malware
- APT32G0050aka SeaLotus, OceanLotus, APT-C-0078 techniques · 15 malware
- FIN10G005111 techniques · 1 malware
- CopyKittensG00528 techniques · 4 malware
- FIN5G005311 techniques · 6 malware
- SowbugG00549 techniques · 2 malware
- NEODYMIUMG00550 techniques · 1 malware
- PROMETHIUMG0056aka StrongPity11 techniques · 2 malware
- Magic HoundG0059aka TA453, COBALT ILLUSION, Charming Kitten78 techniques · 13 malware
- BRONZE BUTLERG0060aka REDBALDKNIGHT, Tick40 techniques · 14 malware
- FIN8G0061aka Syssphinx36 techniques · 11 malware
- TA459G00625 techniques · 4 malware
- BlackOasisG00631 techniques
- LeviathanG0065aka MUDCARP, Kryptonite Panda, Gadolinium50 techniques · 17 malware
- ElderwoodG0066aka Elderwood Gang, Beijing Group, Sneaky Panda9 techniques · 9 malware
- APT37G0067aka InkySquid, ScarCruft, Reaper29 techniques · 13 malware
- PLATINUMG006811 techniques · 3 malware
- Dark CaracalG007012 techniques · 3 malware
- OrangewormG00712 techniques · 8 malware
- APT19G0073aka Codoso, C0d0so0, Codoso Team21 techniques · 2 malware
- RancorG00759 techniques · 4 malware
- ThripG00764 techniques · 3 malware
- LeafminerG0077aka Raspite17 techniques · 4 malware
- Gorgon GroupG007816 techniques · 4 malware
- DarkHydrusG00797 techniques · 3 malware
- Cobalt GroupG0080aka GOLD KINGSWOOD, Cobalt Gang, Cobalt Spider34 techniques · 6 malware
- Tropic TrooperG0081aka Pirate Panda, KeyBoy40 techniques · 6 malware
- APT38G0082aka NICKEL GLADSTONE, BeagleBoyz, Bluenoroff56 techniques · 6 malware
- SilverTerrierG00834 techniques · 5 malware
- GallmakerG00846 techniques
- FIN4G008512 techniques
- APT39G0087aka ITG07, Chafer, Remix Kitten53 techniques · 11 malware
- TEMP.VelesG0088aka XENOTIME0 techniques · 2 malware
- The White CompanyG00897 techniques · 2 malware
- WIRTEG0090aka Ashen Lepus26 techniques · 8 malware
- SilenceG0091aka Whisper Spider28 techniques · 3 malware
- TA505G0092aka Hive0065, Spandex Tempest, CHIMBORAZO34 techniques · 16 malware
- GALLIUMG0093aka Granite Typhoon31 techniques · 16 malware
- KimsukyG0094aka Black Banshee, Velvet Chollima, Emerald Sleet130 techniques · 19 malware
- MacheteG0095aka APT-C-43, El Machete11 techniques · 1 malware
- BlackTechG0098aka Palmerworm14 techniques · 6 malware
- APT-C-36G0099aka Blind Eagle, TAG-144, AguilaCiega38 techniques · 9 malware
- InceptionG0100aka Inception Framework, Cloud Atlas22 techniques · 3 malware
- Wizard SpiderG0102aka UNC1878, TEMP.MixMaster, Grim Spider64 techniques · 22 malware
- MofangG01036 techniques · 2 malware
- DarkVishnyaG010510 techniques · 2 malware
- RockeG010636 techniques
- WhiteflyG01079 techniques · 1 malware
- Blue MockingbirdG010822 techniques · 2 malware
- WindshiftG0112aka Bahamut19 techniques · 1 malware
- ChimeraG011459 techniques · 6 malware
- GOLD SOUTHFIELDG0115aka Pinchy Spider9 techniques · 2 malware
- Fox KittenG0117aka UNC757, Parisite, Pioneer Kitten41 techniques · 5 malware
- Indrik SpiderG0119aka Evil Corp, Manatee Tempest, DEV-024333 techniques · 8 malware
- EvilnumG012011 techniques · 3 malware
- SidewinderG0121aka T-APT-04, Rattlesnake30 techniques · 1 malware
- Silent LibrarianG0122aka TA407, COBALT DICKENS13 techniques
- Volatile CedarG0123aka Lebanese Cedar5 techniques · 2 malware
- WindigoG01247 techniques · 1 malware
- HAFNIUMG0125aka Operation Exchange Marauder, Silk Typhoon44 techniques · 6 malware
- HigaisaG012628 techniques · 3 malware
- TA551G0127aka GOLD CABIN, Shathak14 techniques · 5 malware
- ZIRCONIUMG0128aka APT31, Violet Typhoon29 techniques
- Mustang PandaG0129aka TA416, RedDelta, BRONZE PRESIDENT85 techniques · 23 malware
- Ajax Security TeamG0130aka Operation Woolen-Goldfish, AjaxTM, Rocket Kitten6 techniques · 2 malware
- Tonto TeamG0131aka Earth Akhlut, BRONZE HUNTLEY, CactusPete15 techniques · 6 malware
- Nomadic OctopusG0133aka DustSquad7 techniques · 1 malware
- Transparent TribeG0134aka COPPER FIELDSTONE, APT36, Mythic Leopard14 techniques · 5 malware
- BackdoorDiplomacyG013515 techniques · 5 malware
- IndigoZebraG01367 techniques · 3 malware
- Ferocious KittenG01376 techniques · 2 malware
- AndarielG0138aka Silent Chollima, PLUTONIUM, Onyx Sleet12 techniques · 2 malware
- TeamTNTG013956 techniques · 4 malware
- LazyScripterG014020 techniques · 7 malware
- ConfuciusG0142aka Confucius APT19 techniques · 1 malware
- Aquatic PandaG014335 techniques · 6 malware
- HEXANEG1001aka Lyceum, Siamesekitten, Spirlin36 techniques · 12 malware
- BITTERG1002aka T-APT-1716 techniques · 1 malware
- Ember BearG1003aka UNC2589, Bleeding Bear, DEV-058647 techniques · 11 malware
- LAPSUS$G1004aka DEV-0537, Strawberry Tempest43 techniques · 1 malware
- POLONIUMG1005aka Plaid Rain7 techniques · 2 malware
- Earth LuscaG1006aka TAG-22, Charcoal Typhoon, CHROMIUM44 techniques · 9 malware
- Aoqin DragonG10079 techniques · 2 malware
- SideCopyG100816 techniques · 2 malware
- Moses StaffG1009aka DEV-0500, Marigold Sandstorm12 techniques · 4 malware
- EXOTIC LILYG101115 techniques · 2 malware
- CURIUMG1012aka Crimson Sandstorm, TA456, Tortoise Shell19 techniques · 1 malware
- MetadorG10139 techniques · 2 malware
- LuminousMothG101428 techniques · 2 malware
- Scattered SpiderG1015aka Roasted 0ktapus, Octo Tempest, Storm-087564 techniques · 9 malware
- FIN13G1016aka Elephant Beetle53 techniques · 4 malware
- TA2541G101828 techniques · 9 malware
- MoustachedBouncerG10198 techniques · 3 malware
- Mustard TempestG1020aka DEV-0206, TA569, GOLD PRELUDE12 techniques · 2 malware
- Cinnamon TempestG1021aka DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT19 techniques · 8 malware
- ToddyCatG102225 techniques · 9 malware
- APT5G1023aka Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD29 techniques · 13 malware
- AkiraG1024aka GOLD SAHARA, PUNK SPIDER, Howling Scorpius17 techniques · 8 malware
- MalteiroG102612 techniques · 1 malware
- APT-C-23G1028aka Mantis, Arid Viper, Desert Falcon0 techniques · 1 malware
- AgriusG1030aka Pink Sandstorm, AMERICIUM, Agonizing Serpens22 techniques · 9 malware
- Saint BearG1031aka Storm-0587, TA471, UAC-005618 techniques · 2 malware
- INC RansomG1032aka GOLD IONIC25 techniques · 8 malware
- Star BlizzardG1033aka SEABORGIUM, Callisto Group, TA44620 techniques · 1 malware
- DaggerflyG1034aka Evasive Panda, BRONZE HIGHLAND17 techniques · 6 malware
- Winter VivernG1035aka TA473, UAC-011427 techniques
- Moonstone SleetG1036aka Storm-178930 techniques · 1 malware
- TA577G10376 techniques · 3 malware
- TA578G10384 techniques · 3 malware
- RedCurlG103941 techniques
- PlayG104026 techniques · 9 malware
- Sea TurtleG1041aka Teal Kurma, Marbled Dust, Cosmic Wolf27 techniques · 1 malware
- RedEchoG10425 techniques · 1 malware
- BlackByteG1043aka Hecamede48 techniques · 8 malware
- APT42G104432 techniques · 2 malware
- Storm-1811G104631 techniques · 7 malware
- Velvet AntG104722 techniques · 2 malware
- UNC3886G104849 techniques · 8 malware
- AppleJeusG1049aka Gleaming Pisces, Citrine Sleet, UNC17202 techniques
- Water GaluraG1050aka GOLD FEATHER3 techniques · 2 malware
- Medusa GroupG105157 techniques · 5 malware
- Contagious InterviewG1052aka DeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan54 techniques · 4 malware
- Storm-0501G105342 techniques · 8 malware
- MirrorFaceG1054aka Earth Kasha43 techniques · 16 malware
- VOID MANTICOREG1055aka COBALT MYSTIQUE, Handala Hack, Homeland Justice63 techniques
- TeamPCPG1056aka PCPCat, ShellForce, DeadCatx336 techniques · 3 malware
- ShinyHuntersG1057aka UNC6240, Bling Libra46 techniques · 1 malware