2,054 indexed7.8% MITRE crosswalk

ACTORSThreat actors

2,054 indexed from MISP-Galaxy v341 · 7.8% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)

Showing 2,054 of 2,054 threat actors

G0018

TEMPER PANDA

Aliases

TEMPER PANDAAdmin338Team338+2 more

Last verified · 2026-10-07

CN

TempTick

Aliases

TempTick

Sectors

GovernmentPrivate sector

Last verified · 2026-05-28

TempTick

Aliases

TempTick

Last verified · 2026-10-07

TERBIUM

Aliases

TERBIUM

Last verified · 2026-05-28

TERBIUM

Aliases

TERBIUM

Last verified · 2026-10-07

CN

TEST PANDA

Aliases

TEST PANDA

Last verified · 2026-05-30

TEST PANDA

Aliases

TEST PANDA

Last verified · 2026-10-07

TetrisPhantom

Aliases

TetrisPhantom

Last verified · 2026-05-28

TetrisPhantom

Aliases

TetrisPhantom

Last verified · 2026-10-07

The Big Bang

Aliases

The Big Bang

Last verified · 2026-05-28

The Big Bang

Aliases

The Big Bang

Last verified · 2026-10-07

The Gentlemen

Last verified · 2026-05-28

The Gentlemen

Aliases

The Gentlemen

Last verified · 2026-10-07

G0078

The Gorgon Group

Aliases

Gorgon GroupSubaatATK92+2 more

Last verified · 2026-05-28

G0078

The Gorgon Group

Aliases

The Gorgon GroupGorgon GroupSubaat+2 more

Last verified · 2026-10-07

The Shadow Brokers

Aliases

The ShadowBrokersTSBShadow Brokers+2 more

Last verified · 2026-05-28

The Shadow Brokers

Aliases

The Shadow BrokersThe ShadowBrokersTSB+2 more

Last verified · 2026-10-07

TheDarkOverlord

Aliases

TheDarkOverlord

Last verified · 2026-05-30

TheDarkOverlord

Aliases

TheDarkOverlord

Last verified · 2026-10-07

TheHatman

Aliases

TheHatman

Last verified · 2026-10-07

TheWizards

Aliases

TheWizards

Last verified · 2026-05-28

TheWizards

Aliases

TheWizards

Last verified · 2026-10-07

Threat Actor 888

Aliases

Threat Actor 888

Last verified · 2026-05-30

Threat Actor 888

Aliases

Threat Actor 888

Last verified · 2026-10-07

Threatsec

Aliases

Threatsec

Last verified · 2026-05-28

Threatsec

Aliases

Threatsec

Last verified · 2026-10-07

G0076

Thrip

Aliases

ATK78Thrip

Sectors

Private sector

Last verified · 2026-05-30

G0076

Thrip

Aliases

ThripATK78

Last verified · 2026-10-07

CN

TianWu

Aliases

TianWu

Sectors

Private SectorGambling companiesGamingInformation technology

Last verified · 2026-05-30

TianWu

Aliases

TianWu

Last verified · 2026-10-07

CNG0060

Tick

Aliases

NianBRONZE BUTLERREDBALDKNIGHT+5 more

Sectors

Private sector

Last verified · 2026-05-28

G0060

Tick

Aliases

TickNianBRONZE BUTLER+7 more

Last verified · 2026-10-07

CN

TIDRONE

Aliases

Earth AmmitVENOMTIDRONE

Last verified · 2026-05-28

TIDRONE

Aliases

TIDRONEEarth AmmitVENOM

Last verified · 2026-10-07

CN

TiltedTemple

Aliases

DEV-0322Circle TyphoonTiltedTemple

Last verified · 2026-05-28

TiltedTemple

Aliases

TiltedTempleDEV-0322Circle Typhoon

Last verified · 2026-10-07

TINY SPIDER

Aliases

TINY SPIDER

Last verified · 2026-05-30

TINY SPIDER

Aliases

TINY SPIDER

Last verified · 2026-10-07

ToddyCat

Aliases

WebsiicToddyCat

Sectors

MilitaryGovernment

Last verified · 2026-05-28

ToddyCat

Aliases

ToddyCatWebsiic

Last verified · 2026-10-07

CNG0131

Tonto Team

Aliases

CactusPeteKARMA PANDABRONZE HUNTLEY+6 more

Sectors

MilitaryGovernmentPrivate sector

Last verified · 2026-05-28

G0131

Tonto Team

Aliases

Tonto TeamCactusPeteKARMA PANDA+7 more

Last verified · 2026-10-07

IR

Tortoiseshell

Aliases

IMPERIAL KITTENYellow LidercImperial Kitten+7 more

Sectors

DefenseGovernmentMilitaryFinance

Last verified · 2026-05-28

Tortoiseshell

Aliases

TortoiseshellIMPERIAL KITTENYellow Liderc+7 more

Last verified · 2026-10-07

TOXCAR CYBER TEAM

Aliases

TOXCAR CYBER TEAM

Last verified · 2026-05-28

TOXCAR CYBER TEAM

Aliases

TOXCAR CYBER TEAM

Last verified · 2026-10-07

CN

TOXIC PANDA

Aliases

TOXIC PANDA

Last verified · 2026-05-30

TOXIC PANDA

Aliases

TOXIC PANDA

Last verified · 2026-10-07

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 7.8% coverage. Curated by Adam Lundqvist, Founder at SQUR.
Threat actors — MISP-Galaxy + MITRE crosswalk | SQUR Knowledge Base