2,004 indexed8.0% MITRE crosswalk

ACTORSThreat actors

2,004 indexed from MISP-Galaxy v341 · 8.0% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)Reset country

Showing 204 of 2,004 threat actors

CN

LIMINAL PANDA

Aliases

LIMINAL PANDA

Last verified · 2026-05-28

CN

LongNosedGoblin

Aliases

LongNosedGoblin

Last verified · 2026-05-28

CNG0030

LOTUS PANDA

Aliases

Spring DragonST GroupDRAGONFISH+7 more

Sectors

MilitaryGovernment

Last verified · 2026-05-30

CN

Mana Team

Aliases

Mana Team

Last verified · 2026-05-30

CN

MirrorFace

Aliases

Earth KashaMirrorFace

Last verified · 2026-05-28

CN

Mofang

Aliases

SupermanBRONZE WALKERMofang

Sectors

GovernmentPrivate sector

Last verified · 2026-05-30

CN

Moshen Dragon

Aliases

Moshen Dragon

Last verified · 2026-05-28

CN

MUSTANG PANDA

Aliases

BRONZE PRESIDENTHoneyMyteRed Lich+10 more

Sectors

Civil society

Last verified · 2026-05-28

CNG0019

Naikon

Aliases

PLA Unit 78020OVERRIDE PANDACamerashy+3 more

Sectors

GovernmentPrivate sector

Last verified · 2026-05-28

CNG0014

Night Dragon

Aliases

Night Dragon

Last verified · 2026-05-30

CN

Nitro

Aliases

Covert GroveNitro

Last verified · 2026-05-28

CN

Operation DRBControl

Aliases

Operation DRBControl

Last verified · 2026-05-28

CN

Operation Red Signature

Aliases

Operation Red Signature

Last verified · 2026-05-28

CN

Operation Shadow Force

Aliases

TA-ShadowCricketLarva-24013Operation Shadow Force

Last verified · 2026-05-28

CN

PALE PANDA

Aliases

PALE PANDA

Last verified · 2026-05-30

CN

PassCV

Aliases

PassCV

Last verified · 2026-05-28

CN

PlushDaemon

Aliases

PlushDaemon

Last verified · 2026-05-28

CN

POISONUS PANDA

Aliases

POISONUS PANDA

Last verified · 2026-05-30

CN

PREDATOR PANDA

Aliases

PREDATOR PANDA

Last verified · 2026-05-30

CN

PurpleHaze

Aliases

PurpleHaze

Last verified · 2026-05-28

CN

RADIO PANDA

Aliases

Shrouded CrossbowRADIO PANDA

Last verified · 2026-05-30

CNG0075

RANCOR

Aliases

Rancor groupRancorRancor Group+1 more

Sectors

GovernmentCivil society

Last verified · 2026-05-28

CN

Raspberry Typhoon

Aliases

RADIUMRaspberry Typhoon

Last verified · 2026-05-28

CN

Red Dev 17

Aliases

Red Dev 17

Sectors

High-TechMilitaryEnergy

Last verified · 2026-05-28

CN

Red Menshen

Aliases

Red Dev 18Earth BluecrowRed Menshen

Sectors

GovernmentEducationLogistics

Last verified · 2026-05-28

CN

Red Nue

Aliases

LuoYuRed Nue

Last verified · 2026-05-28

CN

RedGolf

Aliases

RedGolf

Sectors

AviationAutomotiveEducationIntergovernmental

Last verified · 2026-05-28

CN

RedJuliett

Aliases

RedJuliett

Last verified · 2026-05-28

CN

REF2924

Aliases

REF2924

Last verified · 2026-05-28

CN

REF7707

Aliases

CL-STA-0049JewelbugREF7707

Last verified · 2026-05-28

CN

SABRE PANDA

Aliases

SABRE PANDA

Last verified · 2026-05-30

CN

SAMURAI PANDA

Aliases

PLA NavyWisp TeamSAMURAI PANDA

Sectors

Private sectorMilitary

Last verified · 2026-05-30

CN

Sandman APT

Aliases

Sandman APT

Sectors

GovernmentTelecommunications

Last verified · 2026-05-28

CN

Scarab

Last verified · 2026-05-28

CNG0029

Scarlet Mimic

Aliases

Golfing TaurusScarlet Mimic

Last verified · 2026-05-28

CN

Shadow-Earth-053

Aliases

Shadow-Earth-053

Last verified · 2026-05-28

CN

ShaggyPanther

Aliases

ShaggyPanther

Last verified · 2026-05-28

CN

SharpPanda

Aliases

Sharp DragonSharpPanda

Last verified · 2026-05-28

CN

SilkSpecter

Aliases

SilkSpecter

Last verified · 2026-05-28

CN

SLIME29

Aliases

SLIME29

Sectors

Private Sector

Last verified · 2026-05-30

CN

Smishing Triad

Aliases

Smishing Triad

Last verified · 2026-05-28

CN

SneakyChef

Aliases

SneakyChef

Last verified · 2026-05-28

CN

SPICY PANDA

Aliases

SPICY PANDA

Last verified · 2026-05-30

CN

Storm Cloud

Aliases

Storm Cloud

Last verified · 2026-05-28

CN

Storm-0062

Aliases

Oro0lxyDarkShadowStorm-0062

Last verified · 2026-05-28

CN

Storm-0558

Aliases

Storm-0558

Sectors

Government

Last verified · 2026-05-28

CN

Storm-0940

Aliases

CovertNetwork-1658ORB07Storm-0940

Last verified · 2026-05-28

CN

Storm-1175

Aliases

Storm-1175

Last verified · 2026-05-28

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 8.0% coverage. Curated by Adam Lundqvist, Founder at SQUR.
Threat actors — MISP-Galaxy + MITRE crosswalk | SQUR Knowledge Base