Home / Threat intelligence
Threat actors
Profiles of the groups tracked by MITRE ATT&CK, with the CVEs cited for each one — in the group description, technique usage and campaigns attributed to it.
178
groups
70
groups with cited CVEs
119
associated CVEs
20.0
ATT&CK version
178 result(s)
| Group | Also known as | CVEs | Techniques |
|---|---|---|---|
| admin@338 G0018 | 1 | 12 | |
| Agrius G1030 | Pink Sandstorm, AMERICIUM, Agonizing Serpens, BlackShadow | 1 | 22 |
| Ajax Security Team G0130 | Operation Woolen-Goldfish, AjaxTM, Rocket Kitten, Flying Kitten, Operation Saffron Rose | — | 6 |
| Akira G1024 | GOLD SAHARA, PUNK SPIDER, Howling Scorpius | — | 17 |
| Andariel G0138 | Silent Chollima, PLUTONIUM, Onyx Sleet | — | 12 |
| Aoqin Dragon G1007 | 2 | 9 | |
| AppleJeus G1049 | Gleaming Pisces, Citrine Sleet, UNC1720, UNC4736 | 1 | 2 |
| APT-C-23 G1028 | Mantis, Arid Viper, Desert Falcon, TAG-63, Grey Karkadann, Big Bang APT, Two-tailed Scorpion | — | 0 |
| APT-C-36 G0099 | Blind Eagle, TAG-144, AguilaCiega, APT-Q-98 | — | 38 |
| APT1 G0006 | Comment Crew, Comment Group, Comment Panda | — | 23 |
| APT12 G0005 | IXESHE, DynCalc, Numbered Panda, DNSCALC | 6 | 5 |
| APT16 G0023 | — | 1 | |
| APT17 G0025 | Deputy Dog | — | 2 |
| APT18 G0026 | TG-0416, Dynamite Panda, Threat Group-0416 | — | 12 |
| APT19 G0073 | Codoso, C0d0so0, Codoso Team, Sunshop Group | — | 21 |
| APT28 G0007 | IRON TWILIGHT, SNAKEMACKEREL, Swallowtail, Group 74, Sednit, Sofacy, Pawn Storm, Fancy Bear, STRONTIUM, Tsar … | 7 | 93 |
| APT29 G0016 | IRON RITUAL, IRON HEMLOCK, NobleBaron, Dark Halo, NOBELIUM, UNC2452, YTTRIUM, The Dukes, Cozy Bear, CozyDuke,… | 6 | 66 |
| APT3 G0022 | Gothic Panda, Pirpi, UPS Team, Buckeye, Threat Group-0110, TG-0110 | 2 | 44 |
| APT30 G0013 | — | 2 | |
| APT32 G0050 | SeaLotus, OceanLotus, APT-C-00, Canvas Cyclone, BISMUTH | 2 | 78 |
| APT33 G0064 | HOLMIUM, Elfin, Peach Sandstorm | 3 | 31 |
| APT37 G0067 | InkySquid, ScarCruft, Reaper, Group123, TEMP.Reaper, Ricochet Chollima | 6 | 29 |
| APT38 G0082 | NICKEL GLADSTONE, BeagleBoyz, Bluenoroff, Stardust Chollima, Sapphire Sleet, COPERNICIUM | — | 115 |
| APT39 G0087 | ITG07, Chafer, Remix Kitten | — | 53 |
| APT41 G0096 | Wicked Panda, Brass Typhoon, BARIUM | 11 | 82 |
| APT42 G1044 | — | 33 | |
| APT5 G1023 | Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD, Keyhole Panda, UNC2630 | 1 | 29 |
| Aquatic Panda G0143 | — | 35 | |
| Axiom G0001 | Group 72 | 4 | 16 |
| BackdoorDiplomacy G0135 | 1 | 15 | |
| BITTER G1002 | T-APT-17 | 5 | 16 |
| BlackByte G1043 | Hecamede | 1 | 48 |
| BlackOasis G0063 | — | 1 | |
| BlackTech G0098 | Palmerworm | 5 | 14 |
| Blue Mockingbird G0108 | 1 | 22 | |
| BRONZE BUTLER G0060 | REDBALDKNIGHT, Tick | 3 | 40 |
| Carbanak G0008 | Anunak | — | 9 |
| Chimera G0114 | — | 59 | |
| Cinnamon Tempest G1021 | DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT | — | 19 |
| Cleaver G0003 | Threat Group 2889, TG-2889 | — | 5 |
| Cobalt Group G0080 | GOLD KINGSWOOD, Cobalt Gang, Cobalt Spider | 5 | 34 |
| Confucius G0142 | Confucius APT | 3 | 19 |
| Contagious Interview G1052 | DeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan, DEV#POPPER, PurpleBravo, TAG-121 | — | 54 |
| CopyKittens G0052 | — | 8 | |
| CURIUM G1012 | Crimson Sandstorm, TA456, Tortoise Shell, Yellow Liderc | — | 19 |
| Daggerfly G1034 | Evasive Panda, BRONZE HIGHLAND | — | 17 |
| Dark Caracal G0070 | — | 12 | |
| Darkhotel G0012 | DUBNIUM, Zigzag Hail | 1 | 24 |
| DarkHydrus G0079 | — | 7 | |
| DarkVishnya G0105 | — | 10 | |
| Deep Panda G0009 | Shell Crew, WebMasters, KungFu Kittens, PinkPanther, Black Vine | — | 10 |
| Dragonfly G0035 | TEMP.Isotope, DYMALLOY, Berserk Bear, TG-4192, Crouching Yeti, IRON LIBERTY, Energetic Bear, Ghost Blizzard, … | 5 | 56 |
| DragonOK G0017 | — | 0 | |
| Earth Lusca G1006 | TAG-22, Charcoal Typhoon, CHROMIUM, ControlX | 1 | 44 |
| Elderwood G0066 | Elderwood Gang, Beijing Group, Sneaky Panda | — | 9 |
| Ember Bear G1003 | UNC2589, Bleeding Bear, DEV-0586, Cadet Blizzard, Frozenvista, UAC-0056 | 2 | 47 |
| Equation G0020 | — | 4 | |
| Evilnum G0120 | — | 11 | |
| EXOTIC LILY G1011 | 1 | 15 | |
| Ferocious Kitten G0137 | — | 6 | |
| FIN10 G0051 | — | 11 | |
| FIN13 G1016 | Elephant Beetle | 4 | 53 |
| FIN4 G0085 | — | 12 | |
| FIN5 G0053 | — | 11 | |
| FIN6 G0037 | Magecart Group 6, ITG08, Skeleton Spider, TAAL, Camouflage Tempest | 3 | 40 |
| FIN7 G0046 | GOLD NIAGARA, ITG14, Carbon Spider, ELBRUS, Sangria Tempest | 2 | 67 |
| FIN8 G0061 | Syssphinx | 1 | 36 |
| Fox Kitten G0117 | UNC757, Parisite, Pioneer Kitten, RUBIDIUM, Lemon Sandstorm | — | 41 |
| GALLIUM G0093 | Granite Typhoon | — | 31 |
| Gallmaker G0084 | — | 6 | |
| Gamaredon Group G0047 | IRON TILDEN, Primitive Bear, ACTINIUM, Armageddon, Shuckworm, DEV-0157, Aqua Blizzard, NastyShrew | — | 70 |
| GCMAN G0036 | — | 2 | |
| GOLD SOUTHFIELD G0115 | Pinchy Spider | — | 9 |
| Gorgon Group G0078 | — | 16 | |
| Group5 G0043 | — | 4 | |
| HAFNIUM G0125 | Operation Exchange Marauder, Silk Typhoon | — | 44 |
| HEXANE G1001 | Lyceum, Siamesekitten, Spirlin | — | 36 |
| Higaisa G0126 | 1 | 28 | |
| INC Ransom G1032 | GOLD IONIC | 1 | 25 |
| Inception G0100 | Inception Framework, Cloud Atlas | 4 | 22 |
| IndigoZebra G0136 | — | 7 | |
| Indrik Spider G0119 | Evil Corp, Manatee Tempest, DEV-0243, UNC2165 | — | 33 |
| Ke3chang G0004 | APT15, Mirage, Vixen Panda, GREF, Playful Dragon, RoyalAPT, NICKEL, Nylon Typhoon | 1 | 46 |
| Kimsuky G0094 | Black Banshee, Velvet Chollima, Emerald Sleet, THALLIUM, APT43, TA427, Springtail, Earth Kumiho, PatheticSlug | 1 | 130 |
| LAPSUS$ G1004 | DEV-0537, Strawberry Tempest | — | 43 |
| Lazarus Group G0032 | Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace, ZINC, NICKEL ACADEMY, Diamond Sleet | 1 | 93 |
| LazyScripter G0140 | — | 20 | |
| Leafminer G0077 | Raspite | — | 17 |
| Leviathan G0065 | MUDCARP, Kryptonite Panda, Gadolinium, BRONZE MOHAWK, TEMP.Jumper, APT40, TEMP.Periscope, Gingham Typhoon | 3 | 50 |
| Lotus Blossom G0030 | DRAGONFISH, Spring Dragon, RADIUM, Raspberry Typhoon, Bilbug, Thrip | — | 21 |
| LuminousMoth G1014 | — | 28 | |
| Machete G0095 | APT-C-43, El Machete | — | 11 |
| Magic Hound G0059 | TA453, COBALT ILLUSION, Charming Kitten, ITG18, Phosphorus, Newscaster, APT35, Mint Sandstorm | 9 | 78 |
| Malteiro G1026 | — | 12 | |
| Medusa Group G1051 | 2 | 57 | |
| menuPass G0045 | Cicada, POTASSIUM, Stone Panda, APT10, Red Apollo, CVNX, HOGFISH, BRONZE RIVERSIDE | 1 | 46 |
| Metador G1013 | — | 9 | |
| MirrorFace G1054 | Earth Kasha | — | 43 |
| Moafee G0002 | — | 1 | |
| Mofang G0103 | — | 6 | |
| Molerats G0021 | Operation Molerats, Gaza Cybergang | — | 16 |
| Moonstone Sleet G1036 | Storm-1789 | — | 30 |
| Moses Staff G1009 | DEV-0500, Marigold Sandstorm | — | 12 |
| MoustachedBouncer G1019 | 1 | 8 | |
| MuddyWater G0069 | Earth Vetala, MERCURY, Static Kitten, Seedworm, TEMP.Zagros, Mango Sandstorm, TA450, MuddyKrill | 3 | 68 |
| Mustang Panda G0129 | TA416, RedDelta, BRONZE PRESIDENT, STATELY TAURUS, FIREANT, CAMARO DRAGON, EARTH PRETA, HIVE0154, TWILL TYPHO… | 1 | 85 |
| Mustard Tempest G1020 | DEV-0206, TA569, GOLD PRELUDE, UNC1543 | — | 12 |
| Naikon G0019 | — | 14 | |
| NEODYMIUM G0055 | — | 0 | |
| NIMBUS MANTICORE G1059 | UNC1549, TA455, COBALT SMOKEY | — | 65 |
| Nomadic Octopus G0133 | DustSquad | — | 7 |
| OilRig G0049 | COBALT GYPSY, IRN2, APT34, Helix Kitten, Evasive Serpens, Hazel Sandstorm, EUROPIUM, ITG13, Earth Simnavaz, C… | 2 | 76 |
| Orangeworm G0071 | — | 2 | |
| Patchwork G0040 | Hangover Group, Dropping Elephant, Chinastrats, MONSOON, Operation Hangover | 6 | 41 |
| PittyTiger G0011 | — | 2 | |
| PLATINUM G0068 | — | 11 | |
| Play G1040 | 4 | 26 | |
| POLONIUM G1005 | Plaid Rain | — | 7 |
| Poseidon Group G0033 | — | 8 | |
| PROMETHIUM G0056 | StrongPity | — | 11 |
| Putter Panda G0024 | APT2, MSUpdater | — | 4 |
| Rancor G0075 | — | 9 | |
| RedCurl G1039 | — | 41 | |
| RedEcho G1042 | — | 5 | |
| Rocke G0106 | 2 | 36 | |
| RTM G0048 | — | 7 | |
| Saint Bear G1031 | Storm-0587, TA471, UAC-0056, Lorec53 | 1 | 18 |
| Salt Typhoon G1045 | 3 | 58 | |
| Sandworm Team G0034 | ELECTRUM, Telebots, IRON VIKING, BlackEnergy (Group), Quedagh, Voodoo Bear, IRIDIUM, Seashell Blizzard, FROZE… | 2 | 79 |
| Scarlet Mimic G0029 | — | 1 | |
| Scattered Spider G1015 | Roasted 0ktapus, Octo Tempest, Storm-0875, UNC3944 | 2 | 64 |
| Sea Turtle G1041 | Teal Kurma, Marbled Dust, Cosmic Wolf, SILICON | 3 | 27 |
| ShinyHunters G1057 | UNC6240, Bling Libra | 1 | 46 |
| SideCopy G1008 | — | 16 | |
| Sidewinder G0121 | T-APT-04, Rattlesnake | 2 | 30 |
| Silence G0091 | Whisper Spider | — | 28 |
| Silent Librarian G0122 | TA407, COBALT DICKENS | — | 13 |
| SilverTerrier G0083 | — | 4 | |
| Sowbug G0054 | — | 9 | |
| Star Blizzard G1033 | SEABORGIUM, Callisto Group, TA446, COLDRIVER | — | 20 |
| Stealth Falcon G0038 | — | 16 | |
| Storm-0501 G1053 | 4 | 42 | |
| Storm-1811 G1046 | — | 31 | |
| Strider G0041 | ProjectSauron | — | 3 |
| Suckfly G0039 | — | 5 | |
| TA2541 G1018 | — | 28 | |
| TA459 G0062 | 1 | 5 | |
| TA505 G0092 | Hive0065, Spandex Tempest, CHIMBORAZO | — | 34 |
| TA551 G0127 | GOLD CABIN, Shathak | — | 14 |
| TA577 G1037 | — | 6 | |
| TA578 G1038 | — | 4 | |
| TeamPCP G1056 | PCPCat, ShellForce, DeadCatx3, SHADOW-WATER-058, UNC6780 | 2 | 37 |
| TeamTNT G0139 | — | 56 | |
| TEMP.Veles G0088 | XENOTIME | — | 0 |
| The Gentlemen G1058 | Storm-2697, GOLD SHERWOOD | — | 17 |
| The White Company G0089 | — | 7 | |
| Threat Group-1314 G0028 | TG-1314 | — | 4 |
| Threat Group-3390 G0027 | Earth Smilodon, TG-3390, Emissary Panda, BRONZE UNION, APT27, Iron Tiger, LuckyMouse, Linen Typhoon | 8 | 57 |
| Thrip G0076 | — | 4 | |
| ToddyCat G1022 | 1 | 25 | |
| Tonto Team G0131 | Earth Akhlut, BRONZE HUNTLEY, CactusPete, Karma Panda | 7 | 15 |
| Transparent Tribe G0134 | COPPER FIELDSTONE, APT36, Mythic Leopard, ProjectM | 2 | 14 |
| Tropic Trooper G0081 | Pirate Panda, KeyBoy | 3 | 40 |
| Turla G0010 | IRON HUNTER, Group 88, Waterbug, WhiteBear, Snake, Krypton, Venomous Bear, Secret Blizzard, BELUGASTURGEON | — | 68 |
| UNC3886 G1048 | 6 | 49 | |
| Velvet Ant G1047 | 1 | 22 | |
| VOID MANTICORE G1055 | COBALT MYSTIQUE, Handala Hack, Homeland Justice, Karma, Karmabelow80, BANISHED KITTEN, Red Sandstorm | 1 | 63 |
| Volatile Cedar G0123 | Lebanese Cedar | — | 5 |
| Volt Typhoon G1017 | BRONZE SILHOUETTE, Vanguard Panda, DEV-0391, UNC3236, Voltzite, Insidious Taurus, DazedToad | 1 | 81 |
| Water Galura G1050 | GOLD FEATHER | — | 3 |
| Whitefly G0107 | 1 | 9 | |
| Windigo G0124 | — | 7 | |
| Windshift G0112 | Bahamut | — | 19 |
| Winnti Group G0044 | Blackfly | — | 6 |
| Winter Vivern G1035 | TA473, UAC-0114 | — | 27 |
| WIRTE G0090 | Ashen Lepus | — | 26 |
| Wizard Spider G0102 | UNC1878, TEMP.MixMaster, Grim Spider, FIN12, GOLD BLACKBURN, ITG23, Periwinkle Tempest, DEV-0193, Pistachio T… | 1 | 64 |
| ZIRCONIUM G0128 | APT31, Violet Typhoon | 1 | 29 |
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.