2,004 indexed8.0% MITRE crosswalk

ACTORSThreat actors

2,004 indexed from MISP-Galaxy v341 · 8.0% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)

Showing 2,004 of 2,004 threat actors

ResumeLooters

Aliases

ResumeLooters

Last verified · 2026-05-28

ResumeLooters

Aliases

ResumeLooters

Last verified · 2026-06-16

Returned Libra

Aliases

8220 Mining GroupReturned Libra

Last verified · 2026-05-28

Returned Libra

Aliases

Returned Libra8220 Mining Group

Last verified · 2026-06-16

RevengeHotels

Aliases

RevengeHotels

Last verified · 2026-05-28

RevengeHotels

Aliases

RevengeHotels

Last verified · 2026-06-16

RGB-TEAM

Aliases

RGB-TEAM

Last verified · 2026-05-28

RGB-TEAM

Aliases

RGB-TEAM

Last verified · 2026-06-16

RIDDLE SPIDER

Aliases

RIDDLE SPIDER

Last verified · 2026-05-30

RIDDLE SPIDER

Aliases

RIDDLE SPIDER

Last verified · 2026-06-16

MY

RipperSec

Aliases

RipperSec

Last verified · 2026-05-28

RipperSec

Aliases

RipperSec

Last verified · 2026-06-16

Roaming Mantis

Aliases

Roaming Mantis Group

Last verified · 2026-05-28

Roaming Mantis

Aliases

Roaming MantisRoaming Mantis Group

Last verified · 2026-06-16

Roaming Tiger

Aliases

BRONZE WOODLANDRotten TomatoRoaming Tiger

Last verified · 2026-05-30

Roaming Tiger

Aliases

Roaming TigerBRONZE WOODLANDRotten Tomato

Last verified · 2026-06-16

Rocke

Aliases

Aged LibraRocke

Last verified · 2026-05-28

Rocke

Aliases

RockeAged Libra

Last verified · 2026-06-16

IR

Rocket Kitten

Aliases

TEMP.BeanieOperation Woolen GoldfishOperation Woolen-Goldfish+3 more

Sectors

GovernmentMilitary

Last verified · 2026-05-28

Rocket Kitten

Aliases

Rocket KittenTEMP.BeanieOperation Woolen Goldfish+3 more

Last verified · 2026-06-16

RU

RomCom

Aliases

Storm-0978UAT-5647RomCom

Last verified · 2026-05-28

RomCom

Aliases

RomComStorm-0978UAT-5647

Last verified · 2026-06-16

G0048

RTM

Aliases

RTM

Last verified · 2026-05-28

G0048

RTM

Aliases

RTM

Last verified · 2026-06-16

KP

Ruby Sleet

Aliases

CERIUMRuby Sleet

Last verified · 2026-05-28

Ruby Sleet

Aliases

Ruby SleetCERIUM

Last verified · 2026-06-16

RO

RUBYCARP

Aliases

RUBYCARP

Last verified · 2026-05-28

RUBYCARP

Aliases

RUBYCARP

Last verified · 2026-06-16

RU

RuskiNet

Aliases

RuskiNet

Last verified · 2026-05-28

RuskiNet

Aliases

RuskiNet

Last verified · 2026-06-16

RU

Ruthless Rabbit

Aliases

Ruthless Rabbit

Last verified · 2026-05-28

Ruthless Rabbit

Aliases

Ruthless Rabbit

Last verified · 2026-06-16

Saad Tycoon

Aliases

Saad Tycoon

Last verified · 2026-05-28

Saad Tycoon

Aliases

Saad Tycoon

Last verified · 2026-06-16

CN

SABRE PANDA

Aliases

SABRE PANDA

Last verified · 2026-05-30

SABRE PANDA

Aliases

SABRE PANDA

Last verified · 2026-06-16

RU

SaintBear

Aliases

UNC2589TA471UAC-0056+12 more

Last verified · 2026-05-30

SaintBear

Aliases

SaintBearUNC2589TA471+12 more

Last verified · 2026-06-16

SALTY SPIDER

Aliases

SALTY SPIDER

Last verified · 2026-05-28

SALTY SPIDER

Aliases

SALTY SPIDER

Last verified · 2026-06-16

SAMBASPIDER

Aliases

SAMBASPIDER

Last verified · 2026-05-28

SAMBASPIDER

Aliases

SAMBASPIDER

Last verified · 2026-06-16

CN

SAMURAI PANDA

Aliases

PLA NavyWisp TeamSAMURAI PANDA

Sectors

Private sectorMilitary

Last verified · 2026-05-30

SAMURAI PANDA

Aliases

SAMURAI PANDAPLA NavyWisp Team

Last verified · 2026-06-16

SandCat

Aliases

SandCat

Last verified · 2026-05-28

SandCat

Aliases

SandCat

Last verified · 2026-06-16

CN

Sandman APT

Aliases

Sandman APT

Sectors

GovernmentTelecommunications

Last verified · 2026-05-28

Sandman APT

Aliases

Sandman APT

Last verified · 2026-06-16

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 8.0% coverage. Curated by Adam Lundqvist, Founder at SQUR.