2,004 indexed8.0% MITRE crosswalk

ACTORSThreat actors

2,004 indexed from MISP-Galaxy v341 · 8.0% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)Reset country

CountrySectorMITRE-crosswalked onlySort

Showing 77 of 2,004 threat actors

Angry Likho

Aliases

Sticky WerewolfAngry Likho

Last verified · 2026-05-28

APT28

Aliases

Pawn StormFANCY BEARSednit+25 more

Sectors

GovernmentMilitary

Last verified · 2026-05-28

APT29

Aliases

Group 100COZY BEARThe Dukes+14 more

Sectors

GovernmentPrivate sector

Last verified · 2026-05-28

Boulder Bear

Aliases

Last verified · 2026-05-30

BuhTrap

Aliases

Last verified · 2026-05-28

Callisto

Aliases

COLDRIVERSEABORGIUMTA446+8 more

Last verified · 2026-05-28

Chernovite

Aliases

Last verified · 2026-05-28

CIRCUS SPIDER

Aliases

Last verified · 2026-05-28

Curly COMrades

Aliases

Last verified · 2026-05-28

Cyber Berkut

Aliases

Last verified · 2026-05-30

Cyber Serp

Aliases

UAC-0255Cyber Serp

Last verified · 2026-05-28

DEV-0586

Aliases

Ruinous UrsaCadet BlizzardDEV-0586

Last verified · 2026-05-28

DustSquad

Aliases

Nomadic OctopusDustSquad

Last verified · 2026-05-28

ENERGETIC BEAR

Aliases

BERSERK BEARALLANITECASTLE+14 more

Sectors

Private sectorGovernment

Last verified · 2026-05-30

EvilWeb

Aliases

Last verified · 2026-05-28

Femwar02

Aliases

Last verified · 2026-05-28

FIN1

Aliases

Last verified · 2026-05-28

FIN13

Aliases

TG2003Elephant BeetleFIN13

Last verified · 2026-05-28

FIN7

Aliases

CARBON SPIDERGOLD NIAGARACalcium+8 more

Last verified · 2026-05-30

FlyingYeti

Aliases

Storm-1837Flying YetiFlyingYeti

Last verified · 2026-05-28

Gamaredon Group

Aliases

ACTINIUMDEV-0157Blue Otso+10 more

Sectors

Last verified · 2026-05-28

GCMAN

Aliases

Last verified · 2026-05-30

GreedyBear

Aliases

Last verified · 2026-05-28

HiddenArt

Aliases

Last verified · 2026-05-28

Hunt3r Kill3rs

Aliases

Last verified · 2026-05-28

Inception Framework

Aliases

Clean UrsaCloud AtlasOXYGEN+3 more

Sectors

GovernmentPrivate sector

Last verified · 2026-05-28

INDRIK SPIDER

Aliases

Manatee TempestINDRIK SPIDER

Last verified · 2026-05-28

Infrastructure Destruction Squad

Aliases

Dark EngineInfrastructure Destruction Squad

Last verified · 2026-05-28

MAGNETIC SPIDER

Aliases

MAGNETIC SPIDER

Last verified · 2026-05-30

Mora_001

Aliases

Last verified · 2026-05-28

OldGremlin

Aliases

Last verified · 2026-05-28

Operation BugDrop

Aliases

Operation BugDrop

Sectors

Last verified · 2026-05-28

Operation Emmental

Aliases

Retefe GangRetefe GroupOperation Emmental

Last verified · 2026-05-28

RaHDit

Aliases

Russian Angry Hackers Did ItRaHDit

Last verified · 2026-05-28

RomCom

Aliases

Storm-0978UAT-5647RomCom

Last verified · 2026-05-28

RuskiNet

Aliases

Last verified · 2026-05-28

Ruthless Rabbit

Aliases

Ruthless Rabbit

Last verified · 2026-05-28

SaintBear

Aliases

UNC2589TA471UAC-0056+12 more

Last verified · 2026-05-30

Sandworm

Aliases

QuedaghVOODOO BEARTEMP.Noble+11 more

Sectors

Private sectorGovernment

Last verified · 2026-05-28

SHARK SPIDER

Aliases

Last verified · 2026-05-28

Solntsepek

Aliases

Last verified · 2026-05-28

SpaceBears

Aliases

Last verified · 2026-05-28

Storm-0381

Aliases

DEV-0381Storm-0381

Last verified · 2026-05-30

Storm-1099

Aliases

Last verified · 2026-05-28

Storm-1516

Aliases

CopyCopStorm-1516

Last verified · 2026-05-28

Storm-1679

Aliases

Last verified · 2026-05-28

Storm-2372

Aliases

Last verified · 2026-05-28

Sunglow Blizzard

Aliases

DEV-0665Sunglow Blizzard

Last verified · 2026-05-30

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 8.0% coverage. Curated by Adam Lundqvist, Founder at SQUR.

Threat actors — MISP-Galaxy + MITRE crosswalk | SQUR Knowledge Base