2,054 indexed7.8% MITRE crosswalk

ACTORSThreat actors

2,054 indexed from MISP-Galaxy v341 · 7.8% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)

Showing 2,054 of 2,054 threat actors

Red Charon

Aliases

Red Charon

Last verified · 2026-10-07

CN

Red Dev 17

Aliases

Red Dev 17

Sectors

High-TechMilitaryEnergy

Last verified · 2026-05-28

Red Dev 17

Aliases

Red Dev 17

Last verified · 2026-10-07

CN

Red Menshen

Aliases

Red Dev 18Earth BluecrowRed Menshen

Sectors

GovernmentEducationLogistics

Last verified · 2026-05-28

Red Menshen

Aliases

Red MenshenRed Dev 18Earth Bluecrow

Last verified · 2026-10-07

CN

Red Nue

Aliases

LuoYuRed Nue

Last verified · 2026-05-28

Red Nue

Aliases

Red NueLuoYu

Last verified · 2026-10-07

Red-Lili

Aliases

Red-Lili

Last verified · 2026-05-28

Red-Lili

Aliases

Red-Lili

Last verified · 2026-10-07

RedAlpha

Aliases

DeepCliffRed Dev 3RedAlpha

Last verified · 2026-05-28

RedAlpha

Aliases

RedAlphaDeepCliffRed Dev 3

Last verified · 2026-10-07

RedDelta

Aliases

RedDelta

Last verified · 2026-05-28

RedDelta

Aliases

RedDelta

Last verified · 2026-10-07

RedEcho

Aliases

RedEcho

Last verified · 2026-05-30

RedEcho

Aliases

RedEcho

Last verified · 2026-10-07

Redfly

Aliases

Redfly

Last verified · 2026-05-28

Redfly

Aliases

Redfly

Last verified · 2026-10-07

CN

RedGolf

Aliases

RedGolf

Sectors

AviationAutomotiveEducationIntergovernmental

Last verified · 2026-05-28

RedGolf

Aliases

RedGolf

Last verified · 2026-10-07

CN

RedJuliett

Aliases

RedJuliett

Last verified · 2026-05-28

RedJuliett

Aliases

RedJuliett

Last verified · 2026-10-07

RedKitten

Aliases

RedKitten

Last verified · 2026-05-28

RedKitten

Aliases

RedKitten

Last verified · 2026-10-07

RedStinger

Aliases

Bad MagicRedStinger

Last verified · 2026-05-28

RedStinger

Aliases

RedStingerBad Magic

Last verified · 2026-10-07

CN

REF2924

Aliases

REF2924

Last verified · 2026-05-28

REF2924

Aliases

REF2924

Last verified · 2026-10-07

REF5961

Aliases

REF5961

Last verified · 2026-05-28

REF5961

Aliases

REF5961

Last verified · 2026-10-07

CN

REF7707

Aliases

CL-STA-0049JewelbugREF7707

Last verified · 2026-05-28

REF7707

Aliases

REF7707CL-STA-0049Jewelbug

Last verified · 2026-10-07

ResumeLooters

Aliases

ResumeLooters

Last verified · 2026-05-28

ResumeLooters

Aliases

ResumeLooters

Last verified · 2026-10-07

Returned Libra

Aliases

8220 Mining GroupReturned Libra

Last verified · 2026-05-28

Returned Libra

Aliases

Returned Libra8220 Mining Group

Last verified · 2026-10-07

RevengeHotels

Aliases

RevengeHotels

Last verified · 2026-05-28

RevengeHotels

Aliases

RevengeHotels

Last verified · 2026-10-07

RGB-TEAM

Aliases

RGB-TEAM

Last verified · 2026-05-28

RGB-TEAM

Aliases

RGB-TEAM

Last verified · 2026-10-07

RIDDLE SPIDER

Aliases

RIDDLE SPIDER

Last verified · 2026-05-30

RIDDLE SPIDER

Aliases

RIDDLE SPIDER

Last verified · 2026-10-07

MY

RipperSec

Aliases

RipperSec

Last verified · 2026-05-28

RipperSec

Aliases

RipperSec

Last verified · 2026-10-07

Roaming Mantis

Aliases

Roaming Mantis Group

Last verified · 2026-05-28

Roaming Mantis

Aliases

Roaming MantisRoaming Mantis Group

Last verified · 2026-10-07

Roaming Tiger

Aliases

BRONZE WOODLANDRotten TomatoRoaming Tiger

Last verified · 2026-05-30

Roaming Tiger

Aliases

Roaming TigerBRONZE WOODLANDRotten Tomato

Last verified · 2026-10-07

Rocke

Aliases

Aged LibraRocke

Last verified · 2026-05-28

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 7.8% coverage. Curated by Adam Lundqvist, Founder at SQUR.
Threat actors — MISP-Galaxy + MITRE crosswalk | SQUR Knowledge Base