2,004 indexed8.0% MITRE crosswalk

ACTORSThreat actors

2,004 indexed from MISP-Galaxy v341 · 8.0% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)

Showing 2,004 of 2,004 threat actors

NoName057(16)

Aliases

NoName057NoName0571605716nnm+2 more

Sectors

FinancialGovernmentMilitaryTelecommunications

Last verified · 2026-05-28

NoName057(16)

Aliases

NoName057(16)NoName057NoName05716+2 more

Last verified · 2026-06-16

NOTROBIN

Aliases

NOTROBIN

Last verified · 2026-05-28

NOTROBIN

Aliases

NOTROBIN

Last verified · 2026-06-16

Nullbulge

Last verified · 2026-05-28

Nullbulge

Aliases

Nullbulge

Last verified · 2026-06-16

NyxarGroup

Aliases

NyxarGroup

Last verified · 2026-05-28

NyxarGroup

Aliases

NyxarGroup

Last verified · 2026-06-16

OilAlpha

Aliases

OilAlpha

Last verified · 2026-05-28

OilAlpha

Aliases

OilAlpha

Last verified · 2026-06-16

IRG0049

OilRig

Aliases

Twisted KittenCobalt GypsyCrambus+11 more

Sectors

GovernmentPrivate sectorCivil society

Last verified · 2026-05-28

G0049

OilRig

Aliases

OilRigTwisted KittenCobalt Gypsy+11 more

Last verified · 2026-06-16

RU

OldGremlin

Aliases

OldGremlin

Last verified · 2026-05-28

OldGremlin

Aliases

OldGremlin

Last verified · 2026-06-16

KP

OnionDog

Aliases

OnionDog

Sectors

GovernmentPrivate sector

Last verified · 2026-05-30

OnionDog

Aliases

OnionDog

Last verified · 2026-06-16

KP

Opal Sleet

Aliases

OSMIUMKonniVedalia+1 more

Last verified · 2026-05-28

Opal Sleet

Aliases

Opal SleetOSMIUMKonni+1 more

Last verified · 2026-06-16

RU

Operation BugDrop

Aliases

Operation BugDrop

Sectors

Private sector

Last verified · 2026-05-28

Operation BugDrop

Aliases

Operation BugDrop

Last verified · 2026-06-16

PK

Operation C-Major

Aliases

C-MajorTransparent TribeMythic Leopard+9 more

Sectors

Civil societyMilitaryGovernment

Last verified · 2026-05-30

Operation C-Major

Aliases

Operation C-MajorC-MajorTransparent Tribe+9 more

Last verified · 2026-06-16

Operation Cobalt Whisper

Aliases

Operation Cobalt Whisper

Last verified · 2026-05-28

Operation Cobalt Whisper

Aliases

Operation Cobalt Whisper

Last verified · 2026-06-16

Operation Comando

Aliases

Operation Comando

Last verified · 2026-05-28

Operation Comando

Aliases

Operation Comando

Last verified · 2026-06-16

CN

Operation DRBControl

Aliases

Operation DRBControl

Last verified · 2026-05-28

Operation DRBControl

Aliases

Operation DRBControl

Last verified · 2026-06-16

RU

Operation Emmental

Aliases

Retefe GangRetefe GroupOperation Emmental

Last verified · 2026-05-28

Operation Emmental

Aliases

Operation EmmentalRetefe GangRetefe Group

Last verified · 2026-06-16

Operation ForumTroll

Aliases

Operation ForumTroll

Last verified · 2026-05-28

Operation ForumTroll

Aliases

Operation ForumTroll

Last verified · 2026-06-16

Operation Ghoul

Aliases

Operation Ghoul

Last verified · 2026-05-28

Operation Ghoul

Aliases

Operation Ghoul

Last verified · 2026-06-16

Operation Kabar Cobra

Aliases

Operation Kabar Cobra

Last verified · 2026-05-28

Operation Kabar Cobra

Aliases

Operation Kabar Cobra

Last verified · 2026-06-16

Operation Parliament

Aliases

Operation Parliament

Sectors

GovernmentCivil society

Last verified · 2026-05-28

Operation Parliament

Aliases

Operation Parliament

Last verified · 2026-06-16

Operation Poison Needles

Aliases

Operation Poison Needles

Last verified · 2026-05-28

Operation Poison Needles

Aliases

Operation Poison Needles

Last verified · 2026-06-16

CN

Operation Red Signature

Aliases

Operation Red Signature

Last verified · 2026-05-28

Operation Red Signature

Aliases

Operation Red Signature

Last verified · 2026-06-16

CN

Operation Shadow Force

Aliases

TA-ShadowCricketLarva-24013Operation Shadow Force

Last verified · 2026-05-28

Operation Shadow Force

Aliases

Operation Shadow ForceTA-ShadowCricketLarva-24013

Last verified · 2026-06-16

Operation ShadowHammer

Aliases

Operation ShadowHammer

Last verified · 2026-05-28

Operation ShadowHammer

Aliases

Operation ShadowHammer

Last verified · 2026-06-16

Operation Sharpshooter

Aliases

Operation Sharpshooter

Last verified · 2026-05-28

Operation Sharpshooter

Aliases

Operation Sharpshooter

Last verified · 2026-06-16

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 8.0% coverage. Curated by Adam Lundqvist, Founder at SQUR.