Home › Threat Actors

Threat Actor Profiles

65 tracked threat actors across 82 intelligence reports.

Volt Typhoon

Nation-State
Critical InfrastructureCommunicationsOT / ICS
4 reports high

MuddyWater

Nation-State
GovernmentenergyCommunications
4 reports high

FSB Center 16

Cybercrime
CommunicationsenergyFinance
3 reports high

ShinyHunters

Cybercrime
educationHealthcareFinance
3 reports critical

APT28

Nation-State
GovernmentdefenceCritical Infrastructure
2 reports critical

APT29

Nation-State
GovernmentCritical InfrastructureFinance
2 reports critical

Cl0p

Cybercrime
FinanceGovernmentHealthcare
2 reports critical

LockBit

Cybercrime
Critical InfrastructureHealthcareFinance
2 reports critical

RansomHub affiliates

Cybercrime
Legal & ProfessionalFinanceHealthcare
2 reports high

Qilin

Cybercrime
HealthcareCritical InfrastructureFinance
2 reports critical

Salt Typhoon

Nation-State
CommunicationsGovernment
2 reports critical

Akira

Cybercrime
professional-servicesmanufacturingHealthcare
1 report high

APT10

Nation-State
GovernmentLegal & ProfessionalCritical Infrastructure
1 report high

Anubis

Cybercrime
HealthcareGovernmentFinance
1 report critical

APT42

Nation-State
GovernmentHealthcareCommunications
1 report high

Armored Likho

Cybercrime
Critical InfrastructureOT / ICSGovernment
1 report high

APT41

Nation-State
HealthcareFinanceCommunications
1 report critical

Cadet Blizzard

Cybercrime
GovernmentCritical Infrastructuredefence
1 report critical

Cicada3301

Cybercrime
FinanceHealthcareLegal & Professional
1 report critical

DPRK IT Worker Networks (UNC5267 / Nickel Tapestry)

Cybercrime
FinanceCommunicationsHealthcare
1 report high

DragonForce (Hackledorb)

Cybercrime
FinanceCommunications
1 report high

FIN7

Cybercrime
FinanceLegal & Professional
1 report high

Gamaredon

Cybercrime
Critical InfrastructureCommunicationsOT / ICS
1 report high

FulcrumSec

Cybercrime
technologypharmaceuticalmanufacturing
1 report high

GopherWhisper

Cybercrime
Governmentdiplomatic
1 report high

Handala (MOIS / Banished Kitten)

Nation-State
Critical InfrastructureOT / ICS
1 report high

Handala

Cybercrime
Critical Infrastructure
1 report high

Iran-nexus (GigaWiper/BLUERABBIT)

Cybercrime
Critical InfrastructureHealthcareCommunications
1 report high

Icarus

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report high

Harvester

Cybercrime
CommunicationsCritical Infrastructure
1 report high

INC Ransom

Cybercrime
HealthcareFinanceCritical Infrastructure
1 report high

Lazarus Group

Nation-State
FinanceLegal & Professional
1 report high

Lazarus Group (TraderTraitor / APT38 / UNC4736)

Nation-State
FinanceCommunicationsCritical Infrastructure
1 report critical

Lurking Lizard

Cybercrime
FinanceCritical InfrastructureCommunications
1 report high

TeamPCP (Miasma variant)

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report critical

TeamPCP (UNC6780)

Cybercrime
CommunicationsFinanceCritical Infrastructure
1 report critical

KongTuke

Cybercrime
FinanceCritical Infrastructure
1 report high

Mustang Panda

Nation-State
CommunicationsCritical InfrastructureTransport
1 report high

China-aligned (unattributed)

Cybercrime
FinanceCritical InfrastructureCommunications
1 report high

Nimbus Manticore

Nation-State
TransportCommunicationsCritical Infrastructure
1 report high

Phantom Taurus

Nation-State
CommunicationsCritical Infrastructure
1 report critical

Pioneer Kitten / Fox Kitten

Nation-State
HealthcareFinanceCritical Infrastructure
1 report high

RansomHub

Cybercrime
HealthcareCritical InfrastructureFinance
1 report critical

RomCom / Storm-0978 (Russia)

Cybercrime
Governmentdefensetechnology
1 report high

Sandworm

Nation-State
Critical InfrastructureOT / ICSGovernment
1 report critical

Sapphire Sleet (BlueNoroff)

Cybercrime
FinanceCritical Infrastructure
1 report high

Screening Serpens

Cybercrime
CommunicationsCritical Infrastructure
1 report high

SHADOW-EARTH-053

Nation-State
Critical InfrastructureCommunications
1 report high

Scattered Spider

Cybercrime
FinanceCommunicationsLegal & Professional
1 report high

Storm-2603

Cybercrime
GovernmentFinanceprofessional-services
1 report high

Secret Blizzard (Turla)

Cybercrime
Governmentdefencediplomatic
1 report critical

Silent Ransom Group

Cybercrime
Legal & ProfessionalFinance
1 report high

Silk Typhoon

Nation-State
FinanceHealthcareCritical Infrastructure
1 report high

NoName057(16)

Cybercrime
Critical InfrastructureCommunications
1 report high

Storm-2755

Cybercrime
Financeprofessional-servicesGovernment
1 report high

TA4922

Cybercrime
FinanceGovernmentCritical Infrastructure
1 report high

The Gentlemen

Cybercrime
FinanceHealthcareCritical Infrastructure
1 report high

UAT-7810

Cybercrime
Critical InfrastructureCommunicationsGovernment
1 report high

UNC1549 (Screening Serpens / Nimbus Manticore)

Cybercrime
defenceCritical InfrastructureCommunications
1 report high

UNC6508

Cybercrime
HealthcareCritical Infrastructure
1 report high

UNC3886

Nation-State
CommunicationsCritical Infrastructure
1 report critical

Velvet Ant

Cybercrime
Critical InfrastructureFinanceCommunications
1 report critical

World Leaks (Hunters International)

Cybercrime
Critical Infrastructure
1 report high

Weaver Ant

Cybercrime
CommunicationsCritical Infrastructure
1 report critical

TA427 / Kimsuky

Cybercrime
Governmentdefencethink-tanks
1 report