2,004 indexed8.0% MITRE crosswalk

ACTORSThreat actors

2,004 indexed from MISP-Galaxy v341 · 8.0% MITRE Group crosswalk · authored by Adam Lundqvist

CN (204)RU (77)IR (59)KP (25)PS (9)TR (7)

CountrySectorMITRE-crosswalked onlySort

Showing 2,004 of 2,004 threat actors

CHRYSENE

Aliases

OilRigGreenbugCHRYSENE

Sectors

Last verified · 2026-05-28

CHRYSENE

Aliases

CHRYSENEOilRigGreenbug

Last verified · 2026-06-16

CiberInteligenciaSV

Aliases

CiberInteligenciaSV

Last verified · 2026-05-28

CiberInteligenciaSV

Aliases

CiberInteligenciaSV

Last verified · 2026-06-16

CIRCUS SPIDER

Aliases

Last verified · 2026-05-28

CIRCUS SPIDER

Aliases

Last verified · 2026-06-16

CL-STA-0043

Aliases

TGR-STA-0043CL-STA-0043

Last verified · 2026-05-28

CL-STA-0043

Aliases

CL-STA-0043TGR-STA-0043

Last verified · 2026-06-16

CL-STA-0048

Aliases

CL STA 0048CL-STA-0048

Last verified · 2026-05-28

CL-STA-0048

Aliases

CL-STA-0048CL STA 0048

Last verified · 2026-06-16

CL-STA-1009

Aliases

Last verified · 2026-05-28

CL-STA-1009

Aliases

Last verified · 2026-06-16

CL-STA-1020

Aliases

Last verified · 2026-06-16

CL-STA-1087

Aliases

Last verified · 2026-05-28

CL-STA-1087

Aliases

Last verified · 2026-06-16

CL-UNK-1068

Aliases

Last verified · 2026-06-16

Cleaver

Aliases

Operation CleaverOp CleaverTarh Andishan+4 more

Sectors

Private sectorGovernment

Last verified · 2026-05-28

Cleaver

Aliases

CleaverOperation CleaverOp Cleaver+4 more

Last verified · 2026-06-16

Clever Kitten

Aliases

Group 41Clever Kitten

Last verified · 2026-05-30

Clever Kitten

Aliases

Clever KittenGroup 41

Last verified · 2026-06-16

CLOCKWORK SPIDER

Aliases

CLOCKWORK SPIDER

Last verified · 2026-05-30

CLOCKWORK SPIDER

Aliases

CLOCKWORK SPIDER

Last verified · 2026-06-16

CloudSorcerer

Aliases

Last verified · 2026-05-28

CloudSorcerer

Aliases

Last verified · 2026-06-16

Cobalt

Aliases

Cobalt GroupCobalt GangGOLD KINGSWOOD+3 more

Last verified · 2026-05-28

Cobalt

Aliases

CobaltCobalt GroupCobalt Gang+3 more

Last verified · 2026-06-16

COBALT JUNO

Aliases

APT-C-38 (QiAnXin)SABER LIONTG-2884 (SCWX CTU)+1 more

Last verified · 2026-05-28

COBALT JUNO

Aliases

COBALT JUNOAPT-C-38 (QiAnXin)SABER LION+1 more

Last verified · 2026-06-16

COBALT KATANA

Aliases

Hive0081 (IBM)SectorD01 (NHSC)xHunt campaign (Palo Alto)+2 more

Last verified · 2026-05-28

COBALT KATANA

Aliases

COBALT KATANAHive0081 (IBM)SectorD01 (NHSC)+2 more

Last verified · 2026-06-16

Codefinger

Aliases

Last verified · 2026-05-28

Codefinger

Aliases

Last verified · 2026-06-16

Coinbase Cartel

Last verified · 2026-05-28

Coinbase Cartel

Aliases

Coinbase Cartel

Last verified · 2026-06-16

Cold River

Aliases

Nahr ElbardNahr el baredCold River

Last verified · 2026-05-28

Cold River

Aliases

Cold RiverNahr ElbardNahr el bared

Last verified · 2026-06-16

ComicForm

Aliases

Last verified · 2026-05-28

ComicForm

Aliases

Last verified · 2026-06-16

Common Raven

Aliases

OPERA1ERNXSMSDESKTOP-GROUP+1 more

Last verified · 2026-05-30

Common Raven

Aliases

Common RavenOPERA1ERNXSMS+1 more

Last verified · 2026-06-16

Confucious

Aliases

Last verified · 2026-05-28

Confucious

Aliases

Last verified · 2026-06-16

Conquerors Electronic Army

Aliases

Conquerors Electronic Army

Last verified · 2026-05-28

Conquerors Electronic Army

Aliases

Conquerors Electronic Army

Last verified · 2026-06-16

Contagious Interview

Aliases

Contagious Interview

Last verified · 2026-05-28

Contagious Interview

Aliases

Contagious Interview

Last verified · 2026-06-16

Copy-Paste

Aliases

Sectors

Last verified · 2026-05-30

Copy-Paste

Aliases

Last verified · 2026-06-16

Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). MITRE Group crosswalk inferred via alias match on the G#### pattern — 8.0% coverage. Curated by Adam Lundqvist, Founder at SQUR.

Threat actors — MISP-Galaxy + MITRE crosswalk | SQUR Knowledge Base