2,054 indexed
ACTORSThreat actors
2054 threat-actor records from MISP-Galaxy v341. Filter by attributed country, or for country / sector / MITRE-Group facets see /explore/actors. Authored by Adam Lundqvist.
Showing 701–750 of 1,596 in Other · page 15 of 32
| ID | Title | Summary |
|---|---|---|
| LOTUS-PANDA | LOTUS PANDA | Lotus Blossom is a threat group that has targeted government and military organizations in Southeast Asia. |
| Lucky Cat | Lucky Cat | A series of attacks, targeting both Indian military research and south Asian shipping organizations, demonstrate the minimum level of effort required to succes… |
| LUCKY-CAT | Lucky Cat | A series of attacks, targeting both Indian military research and south Asian shipping organizations, demonstrate the minimum level of effort required to succes… |
| LulzIntel | LulzIntel | The threat actor lulzintel has claimed responsibility for multiple data breaches, including those of vegehome.pl, Almaex, Smaregi, and Kin Teck Tong, exposing … |
| LULZINTEL | LulzIntel | The threat actor lulzintel has claimed responsibility for multiple data breaches, including those of vegehome.pl, Almaex, Smaregi, and Kin Teck Tong, exposing … |
| LulzSec Black | LulzSec Black | LulzSec Black is a hacktivist group that has claimed responsibility for coordinated DDoS attacks against Cyprus' government and critical infrastructure in resp… |
| LULZSEC-BLACK | LulzSec Black | LulzSec Black is a hacktivist group that has claimed responsibility for coordinated DDoS attacks against Cyprus' government and critical infrastructure in resp… |
| Luna Moth | Luna Moth | Luna Moth conducts high-tempo callback phishing campaigns targeting legal and financial organizations in the U.S., using social engineering to lure victims int… |
| LUNA-MOTH | Luna Moth | Luna Moth conducts high-tempo callback phishing campaigns targeting legal and financial organizations in the U.S., using social engineering to lure victims int… |
| LUNAR SPIDER | LUNAR SPIDER | According to CrowdStrike, this actor is using BokBok/IcedID, potentially buying distribution through Emotet infections. On March 17, 2019, CrowdStrike Intellig… |
| LUNAR-SPIDER | LUNAR SPIDER | According to CrowdStrike, this actor is using BokBok/IcedID, potentially buying distribution through Emotet infections. On March 17, 2019, CrowdStrike Intellig… |
| luoxk | luoxk | luoxk is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Original record: luoxk is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Or… |
| LUOXK | luoxk | Luoxk is a malware campaign targeting web servers throughout Asia, Europe and North America. |
| LYCEUM | LYCEUM | Lyceum is an Iranian APT group that has been active since at least 2014. They primarily target Middle Eastern governments and organizations in the energy and t… |
| MADI | Madi | Kaspersky Lab and Seculert worked together to sinkhole the Madi Command & Control (C&C) servers to monitor the campaign. Kaspersky Lab and Seculert identified … |
| MageCart | MageCart | MageCart is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Original record: Digital threat management company RiskIQ tracks the activity of MageC… |
| MAGECART | MageCart | Digital threat management company RiskIQ tracks the activity of MageCart group and reported their use of web-based card skimmers since 2016. |
| MAGIC-KITTEN | Magic Kitten | Earliest activity back to November 2008. An established group of cyber attackers based in Iran, who carried on several campaigns in 2013, including a series of… |
| MAGNETIC-SPIDER | MAGNETIC SPIDER | |
| MALKAMAK | MalKamak | MalKamak is an Iranian threat actor that has been operating since at least 2018. They have been involved in highly targeted cyber espionage campaigns against g… |
| MALLARD SPIDER | MALLARD SPIDER | MALLARD SPIDER is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as GOLD LAGOON. Original record: Crowdstrike tarcks th… |
| MALLARD-SPIDER | MALLARD SPIDER | Crowdstrike tarcks the operators behind the Qbot as MALLARD SPIDER |
| Malsmoke | Malsmoke | Malsmoke primarily targets Japanese users through malvertising campaigns that deliver Zloader malware, often leveraging adult content lures and geographic IP i… |
| MALSMOKE | Malsmoke | Malsmoke primarily targets Japanese users through malvertising campaigns that deliver Zloader malware, often leveraging adult content lures and geographic IP i… |
| Malteiro | Malteiro | Malteiro is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Original record: This group of cybercriminals is named Malteiroby SCILabs, they operat… |
| MALTEIRO | Malteiro | This group of cybercriminals is named Malteiroby SCILabs, they operate and distribute the URSA/Mispadu banking trojan. |
| MANA-TEAM | Mana Team | |
| Markopolo | Markopolo | Markopolo is a threat actor known for running scams targeting cryptocurrency users through a fake app called Vortax. They use social media and a dedicated blog… |
| MARKOPOLO | Markopolo | Markopolo is a threat actor known for running scams targeting cryptocurrency users through a fake app called Vortax. They use social media and a dedicated blog… |
| Massgrave | Massgrave | Massgrave is a hacking group that has developed a method to bypass Microsoft's software licensing for Windows and Office, enabling permanent activation of vers… |
| MASSGRAVE | Massgrave | Massgrave is a hacking group that has developed a method to bypass Microsoft's software licensing for Windows and Office, enabling permanent activation of vers… |
| Metador | Metador | Metador primarily targets telecommunications, internet service providers, and universities in several countries in the Middle East and Africa. Metador’s attack… |
| METADOR | Metador | Metador primarily targets telecommunications, internet service providers, and universities in several countries in the Middle East and Africa. Metador’s attack… |
| MIMIC SPIDER | MIMIC SPIDER | MIMIC SPIDER is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Original record: MIMIC SPIDER is a threat actor catalogued by MISP-Galaxy (MISP-Ga… |
| MIMIC-SPIDER | MIMIC SPIDER | MIMIC SPIDER is mentioned in two summary reports only |
| Mirage Tiger | Mirage Tiger | Mirage Tiger is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Documented victim organisations include Germany. Original record: Mirage Tiger is … |
| MIRAGE-TIGER | Mirage Tiger | |
| MIRRORFACE | MirrorFace | MirrorFace is a Chinese-speaking advanced persistent threat group that has been targeting high-value organizations in Japan, including media, government, diplo… |
| Mocha Manakin | Mocha Manakin | Mocha Manakin is a threat actor that employs the paste and run technique for initial access, tricking users into executing scripts that download various payloa… |
| MOCHA-MANAKIN | Mocha Manakin | Mocha Manakin is a threat actor that employs the paste and run technique for initial access, tricking users into executing scripts that download various payloa… |
| MODERNSTEALER | ModernStealer | ModernStealer is linked to underground posts offering sensitive military, government, nuclear, and aerospace material, with connections to a Session contact id… |
| ModifiedElephant | ModifiedElephant | Our research into these intrusions revealed a decade of persistent malicious activity targeting specific groups and individuals that we now attribute to a prev… |
| MODIFIEDELEPHANT | ModifiedElephant | Our research into these intrusions revealed a decade of persistent malicious activity targeting specific groups and individuals that we now attribute to a prev… |
| MOFANG | Mofang | |
| Mogilevich | Mogilevich | Mogilevich is a ransomware group known for claiming to breach organizations like Epic Games and Ireland's Department of Foreign Affairs, offering stolen data f… |
| MOGILEVICH | Mogilevich | Mogilevich is a ransomware group known for claiming to breach organizations like Epic Games and Ireland's Department of Foreign Affairs, offering stolen data f… |
| Molatori | Molatori | Molatori is a threat actor group identified by Malwarebytes researchers, known for utilizing malicious ScreenConnect clients hosted on domains like atmolatori.… |
| MOLATORI | Molatori | Molatori is a threat actor group identified by Malwarebytes researchers, known for utilizing malicious ScreenConnect clients hosted on domains like atmolatori.… |
| MOLERATS | Molerats | In October 2012, malware attacks against Israeli government targets grabbed media attention as officials temporarily cut off Internet access for its entire pol… |
| MoneyTaker | MoneyTaker | In less than two years, this group has conducted over 20 successful attacks on financial institutions and legal firms in the USA, UK and Russia. The group has … |