2,004 indexed

ACTORSThreat actors

2004 threat-actor records from MISP-Galaxy v341. Filter by attributed country, or for country / sector / MITRE-Group facets see /explore/actors. Authored by Adam Lundqvist.

Showing 51–100 of 2,004 · page 2 of 41

IDTitleSummary
APT-C-12APT-C-12According to 360 TIC the actor has carried out continuous cyber espionage activities since 2011 on key units and departments of the Chinese government, militar…
APT-C-12APT-C-12According to 360 TIC the actor has carried out continuous cyber espionage activities since 2011 on key units and departments of the Chinese government, militar…
APT-C-27APT-C-27
SY
A threat actor which is ac tive since at least November 2014. This group launched long-term at tacks against organizations in the Syrian region using Android a…
APT-C-27APT-C-27A threat actor which is ac tive since at least November 2014. This group launched long-term at tacks against organizations in the Syrian region using Android a…
APT-C-34APT-C-34As reported by ZDNet, Chinese cyber-security vendor Qihoo 360 published a report on 2019-11-29 exposing an extensive hacking operation targeting the country of…
APT-C-34APT-C-34As reported by ZDNet, Chinese cyber-security vendor Qihoo 360 published a report on 2019-11-29 exposing an extensive hacking operation targeting the country of…
APT-C-36APT-C-36Since April 2018, an APT group (Blind Eagle, APT-C-36) suspected coming from South America carried out continuous targeted attacks against Colombian government…
APT-C-36APT-C-36Since April 2018, an APT group (Blind Eagle, APT-C-36) suspected coming from South America carried out continuous targeted attacks against Colombian government…
APT-C-60APT-C-60APT-C-60 is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as APT-Q-12. Original record: APT-C-60 is a threat actor cat…
APT-C-60APT-C-60APT-C-60
APT.3102APT.3102
CN
APT.3102 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Original record: APT.3102 is a Chinese-attributed threat actor cata…
APT-3102APT.3102
APT1APT1
CN
PLA Unit 61398 (Chinese: 61398部队, Pinyin: 61398 bùduì) is the Military Unit Cover Designator (MUCD)[1] of a People's Liberation Army advanced persistent threat…
APT1APT1PLA Unit 61398 (Chinese: 61398部队, Pinyin: 61398 bùduì) is the Military Unit Cover Designator (MUCD)[1] of a People's Liberation Army advanced persistent threat…
APT10APT10
CN
menuPass is a threat group that has been active since at least 2006. Individual members of menuPass are known to have acted in association with the Chinese Min…
APT10APT10menuPass is a threat group that has been active since at least 2006. Individual members of menuPass are known to have acted in association with the Chinese Min…
APT12APT12
CN
APT12 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as NUMBERED PANDA, TG-2754, BeeBus (and 8 mo…
APT12APT12A group of China-based attackers, who conducted a number of spear phishing attacks in 2013.
APT14APT14
CN
PLA Navy Anchor Panda is an adversary that CrowdStrike has tracked extensively over the last year targeting both civilian and military maritime operations in t…
APT14APT14PLA Navy Anchor Panda is an adversary that CrowdStrike has tracked extensively over the last year targeting both civilian and military maritime operations in t…
APT15APT15
CN
APT15 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as VIXEN PANDA, Ke3Chang, Playful Dragon (an…
APT15APT15This threat actor uses phishing techniques to compromise the networks of foreign ministries of European countries for espionage purposes.
APT16APT16
CN
Between November 26, 2015, and December 1, 2015, known and suspected China-based APT groups launched several spear-phishing attacks targeting Japanese and Taiw…
APT16APT16Between November 26, 2015, and December 1, 2015, known and suspected China-based APT groups launched several spear-phishing attacks targeting Japanese and Taiw…
APT17APT17
CN
FireEye described APT17 in a 2015 report as: 'APT17, also known as DeputyDog, is a China based threat group that FireEye Intelligence has observed conducting n…
APT17APT17FireEye described APT17 in a 2015 report as: 'APT17, also known as DeputyDog, is a China based threat group that FireEye Intelligence has observed conducting n…
APT18APT18
CN
Wekby was described by Palo Alto Networks in a 2015 report as: 'Wekby is a group that has been active for a number of years, targeting various industries such …
APT18APT18Wekby was described by Palo Alto Networks in a 2015 report as: 'Wekby is a group that has been active for a number of years, targeting various industries such …
APT19APT19
CN
APT19 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as DEEP PANDA, Codoso, WebMasters (and 12 mo…
APT19APT19Adversary group targeting financial, technology, non-profit organisations.
APT2APT2
CN
Putter Panda were the subject of an extensive report by CrowdStrike, which stated: 'The CrowdStrike Intelligence team has been tracking this particular unit si…
APT2APT2Putter Panda were the subject of an extensive report by CrowdStrike, which stated: 'The CrowdStrike Intelligence team has been tracking this particular unit si…
APT20APT20
CN
We’ve uncovered some new data and likely attribution regarding a series of APT watering hole attacks this past summer. Watering hole attacks are an increasingl…
APT20APT20We’ve uncovered some new data and likely attribution regarding a series of APT watering hole attacks this past summer. Watering hole attacks are an increasingl…
APT21APT21
CN
APT21 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as HAMMER PANDA, TEMP.Zhenbao, NetTraveler. …
APT21APT21
APT22APT22
CN
APT22 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as G0039, Suckfly, BRONZE OLIVE (and 1 more)…
APT22APT22Suckfly is a China-based threat group that has been active since at least 2014
APT23APT23
CN
TrendMicro described Tropic Trooper in a 2015 report as: 'Taiwan and the Philippines have become the targets of an ongoing campaign called Operation TropicTroo…
APT23APT23TrendMicro described Tropic Trooper in a 2015 report as: 'Taiwan and the Philippines have become the targets of an ongoing campaign called Operation TropicTroo…
APT24APT24
CN
APT24 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as PITTY PANDA, G0011, Temp.Pittytiger. Orig…
APT24APT24The Pitty Tiger group has been active since at least 2011. They have been seen using HeartBleed vulnerability in order to directly get valid credentials
APT26APT26
CN
APT26 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as JerseyMikes, TURBINE PANDA, BRONZE EXPRES…
APT26APT26
APT27APT27
CN
APT27 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as GreedyTaotie, TG-3390, EMISSARY PANDA (an…
APT27APT27A China-based actor that targets foreign embassies to collect data on government, defence, and technology sectors.
APT28APT28
RU
The Sofacy Group (also known as APT28, Pawn Storm, Fancy Bear and Sednit) is a cyber espionage group believed to have ties to the Russian government. Likely op…
APT28APT28The Sofacy Group (also known as APT28, Pawn Storm, Fancy Bear and Sednit) is a cyber espionage group believed to have ties to the Russian government. Likely op…
APT29APT29
RU
A 2015 report by F-Secure describe APT29 as: 'The Dukes are a well-resourced, highly dedicated and organized cyberespionage group that we believe has been work…
APT29APT29A 2015 report by F-Secure describe APT29 as: 'The Dukes are a well-resourced, highly dedicated and organized cyberespionage group that we believe has been work…
Sourced from MISP-Galaxy Threat Actor cluster v341 (CC-0). Curated by Adam Lundqvist, Founder at SQUR.