2,004 indexed8.0% MITRE crosswalk

ACTORSThreat actors

2,004 indexed from MISP-Galaxy v341 · 8.0% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)

Showing 2,004 of 2,004 threat actors

Kairos

Aliases

Kairos

Last verified · 2026-06-16

Karakurt

Aliases

Karakurt Lair

Last verified · 2026-05-28

Karakurt

Aliases

KarakurtKarakurt Lair

Last verified · 2026-06-16

Karkadann

Aliases

PiwiksKarkadann

Last verified · 2026-05-28

Karkadann

Aliases

KarkadannPiwiks

Last verified · 2026-06-16

MA

Kasablanka

Aliases

Kasablanka

Last verified · 2026-05-28

Kasablanka

Aliases

Kasablanka

Last verified · 2026-06-16

KAX17

Aliases

KAX17

Last verified · 2026-05-28

KAX17

Aliases

KAX17

Last verified · 2026-06-16

Kazu

Last verified · 2026-05-28

Kazu

Aliases

Kazu

Last verified · 2026-06-16

Keksec

Aliases

Keksec

Last verified · 2026-05-30

Keksec

Aliases

Keksec

Last verified · 2026-06-16

ES

KelvinSecurity

Aliases

KelvinSecurity

Last verified · 2026-05-28

KelvinSecurity

Aliases

KelvinSecurity

Last verified · 2026-06-16

Keymous+

Aliases

keymousKeymous PlusKeymous+

Last verified · 2026-05-28

Keymous+

Aliases

Keymous+keymousKeymous Plus

Last verified · 2026-06-16

Killnet

Aliases

Killnet

Sectors

Government

Last verified · 2026-05-30

Killnet

Aliases

Killnet

Last verified · 2026-06-16

KPG0086

Kimsuky

Aliases

Velvet ChollimaBlack BansheeThallium+7 more

Sectors

GovernmentPrivate sector

Last verified · 2026-05-30

G0086

Kimsuky

Aliases

KimsukyVelvet ChollimaBlack Banshee+7 more

Last verified · 2026-06-16

Kinsing

Aliases

Money LibraKinsing

Last verified · 2026-05-28

Kinsing

Aliases

KinsingMoney Libra

Last verified · 2026-06-16

Kiss-a-Dog

Aliases

Kiss-a-Dog

Last verified · 2026-05-28

Kiss-a-Dog

Aliases

Kiss-a-Dog

Last verified · 2026-06-16

KromSec

Aliases

KromSec

Last verified · 2026-05-28

KromSec

Aliases

KromSec

Last verified · 2026-06-16

Krybit

Last verified · 2026-05-28

Krybit

Aliases

Krybit

Last verified · 2026-06-16

LabHost

Aliases

LabHost

Last verified · 2026-05-28

LabHost

Aliases

LabHost

Last verified · 2026-06-16

Lamashtu

Last verified · 2026-05-28

Lamashtu

Aliases

Lamashtu

Last verified · 2026-06-16

Lancefly

Aliases

Lancefly

Last verified · 2026-05-28

Lancefly

Aliases

Lancefly

Last verified · 2026-06-16

LAPSUS

Aliases

LAPSUS$DEV-0537SLIPPY SPIDER+3 more

Last verified · 2026-05-30

LAPSUS

Aliases

LAPSUSLAPSUS$DEV-0537+4 more

Last verified · 2026-06-16

Larva-208

Aliases

EncryptHubLarva-208

Last verified · 2026-05-28

Larva-208

Aliases

Larva-208EncryptHub

Last verified · 2026-06-16

KP

Larva-24005

Aliases

Larva-24005

Last verified · 2026-05-28

Larva-24005

Aliases

Larva-24005

Last verified · 2026-06-16

Larva-24010

Aliases

Larva-24010

Last verified · 2026-05-28

Larva-24010

Aliases

Larva-24010

Last verified · 2026-06-16

Larva-26002

Aliases

Larva-26002

Last verified · 2026-05-28

Larva-26002

Aliases

Larva-26002

Last verified · 2026-06-16

Larva‑25012

Aliases

Larva‑25012

Last verified · 2026-05-28

Larva‑25012

Aliases

Larva‑25012

Last verified · 2026-06-16

KPG0032

Lazarus Group

Aliases

Operation DarkSeoulDark SeoulHidden Cobra+36 more

Sectors

GovernmentPrivate sector

Last verified · 2026-05-28

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 8.0% coverage. Curated by Adam Lundqvist, Founder at SQUR.