Home › Threat Actors

Threat Actor Profiles

96 tracked threat actors across 117 intelligence reports.

Volt Typhoon

Nation-State
Critical InfrastructureCommunicationsOT / ICS
4 reports high

MuddyWater

Nation-State
GovernmentenergyCommunications
4 reports high

FSB Center 16

Cybercrime
CommunicationsenergyFinance
3 reports high

Qilin

Cybercrime
HealthcareFinanceCommunications
3 reports critical

ShinyHunters

Cybercrime
educationHealthcareFinance
3 reports critical

APT28

Nation-State
GovernmentdefenceCritical Infrastructure
2 reports critical

APT29

Nation-State
GovernmentCritical InfrastructureFinance
2 reports critical

Cl0p

Cybercrime
FinanceGovernmentHealthcare
2 reports critical

The Gentlemen

Cybercrime
HealthcareFinanceCritical Infrastructure
2 reports high

Gunra

Cybercrime
HealthcareFinanceCritical Infrastructure
2 reports high

Lazarus Group

Nation-State
TransportCritical InfrastructureFinance
2 reports high

LockBit

Cybercrime
Critical InfrastructureHealthcareFinance
2 reports critical

RansomHub affiliates

Cybercrime
Legal & ProfessionalFinanceHealthcare
2 reports high

Salt Typhoon

Nation-State
CommunicationsGovernment
2 reports critical

APT10

Nation-State
GovernmentLegal & ProfessionalCritical Infrastructure
1 report high

Anubis

Cybercrime
HealthcareGovernmentFinance
1 report critical

Akira

Cybercrime
professional-servicesmanufacturingHealthcare
1 report high

APT34

Nation-State
Critical InfrastructureFinanceCommunications
1 report high

APT40 (Kryptonite Panda / TEMP.Periscope)

Nation-State
defensemaritimeacademia
1 report high

APT36

Nation-State
CommunicationsCritical Infrastructure
1 report high

APT42

Nation-State
GovernmentHealthcareCommunications
1 report high

APT41

Nation-State
HealthcareFinanceCommunications
1 report critical

Armored Likho

Cybercrime
Critical InfrastructureOT / ICSGovernment
1 report high

Cadet Blizzard

Cybercrime
GovernmentCritical Infrastructuredefence
1 report critical

Midnight Blizzard (Storm-2945)

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report high

Cavern Manticore / APT42

Nation-State
Critical InfrastructureCommunicationsFinance
1 report high

Cicada3301

Cybercrime
FinanceHealthcareLegal & Professional
1 report critical

Clop

Cybercrime
Critical InfrastructureFinance
1 report high

CyberAv3ngers (IRGC)

Cybercrime
Critical InfrastructureOT / ICSwater
1 report high

CyberAv3ngers (Shahid Kaveh Group)

Cybercrime
OT / ICSCritical Infrastructurewater-utilities
1 report high

CyberAv3ngers (suspected)

Cybercrime
Critical InfrastructureOT / ICS
1 report high

DPRK IT Worker Networks (UNC5267 / Nickel Tapestry)

Cybercrime
FinanceCommunicationsHealthcare
1 report high

DeadLock

Cybercrime
FinanceHealthcaremanufacturing
1 report critical

DragonForce (Hackledorb)

Cybercrime
FinanceCommunications
1 report high

FIN7

Cybercrime
FinanceLegal & Professional
1 report high

Emperador

Cybercrime
Critical InfrastructureCommunications
1 report medium

FulcrumSec

Cybercrime
technologypharmaceuticalmanufacturing
1 report high

Gamaredon

Cybercrime
Critical InfrastructureCommunicationsOT / ICS
1 report high

Iran-nexus (GigaWiper/BLUERABBIT)

Cybercrime
Critical InfrastructureHealthcareCommunications
1 report high

Hyadina (GodDamn / Beast / Monster)

Cybercrime
FinanceHealthcaremanufacturing
1 report high

GopherWhisper

Cybercrime
Governmentdiplomatic
1 report high

Handala

Cybercrime
Critical Infrastructure
1 report high

Harvester

Cybercrime
CommunicationsCritical Infrastructure
1 report high

Head Mare

Cybercrime
Critical InfrastructureCommunicationsTransport
1 report high

Handala (MOIS / Banished Kitten)

Nation-State
Critical InfrastructureOT / ICS
1 report high

Icarus

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report high

INC Ransom

Cybercrime
HealthcareFinanceCritical Infrastructure
1 report high

Interlock

Cybercrime
Healthcareeducationmanufacturing
1 report critical

JADEPUFFER

Cybercrime
Critical InfrastructureFinance
1 report critical

knaithe/KnYuan

Cybercrime
ai-infrastructuretechnologyfinancial-services
1 report high

Jewelbug (Earth Alux / Ink Dragon / REF7707 / CL-STA-0049)

Cybercrime
CommunicationsCritical InfrastructureFinance
1 report high

LAUNDRY BEAR

Nation-State
Critical InfrastructureCommunications
1 report high

Lazarus Group (TraderTraitor / APT38 / UNC4736)

Nation-State
FinanceCommunicationsCritical Infrastructure
1 report critical

Linen Typhoon

Nation-State
telecommunicationsGovernmentdefense
1 report critical

Lurking Lizard

Cybercrime
FinanceCritical InfrastructureCommunications
1 report high

Spearwing

Cybercrime
HealthcareeducationFinance
1 report high

TeamPCP (Miasma variant)

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report critical

TeamPCP (UNC6780)

Cybercrime
CommunicationsFinanceCritical Infrastructure
1 report critical

KongTuke

Cybercrime
FinanceCritical Infrastructure
1 report high

Mustang Panda

Nation-State
CommunicationsCritical InfrastructureTransport
1 report high

NadMesh

Cybercrime
technologyFinancecloud
1 report high

Nimbus Manticore

Nation-State
TransportCommunicationsCritical Infrastructure
1 report high

Nitrogen/Azote

Cybercrime
manufacturingprofessional-servicestechnology
1 report high

OilRig (APT34)

Nation-State
energyCommunicationsGovernment
1 report high

China-aligned (unattributed)

Cybercrime
FinanceCritical InfrastructureCommunications
1 report high

DriveSurge

Cybercrime
FinanceCritical Infrastructure
1 report critical

Phantom Taurus

Nation-State
CommunicationsCritical Infrastructure
1 report critical

Pioneer Kitten / Fox Kitten

Nation-State
HealthcareFinanceCritical Infrastructure
1 report high

Contagious Interview / Famous Chollima (North Korea)

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report high

RansomHub

Cybercrime
HealthcareCritical InfrastructureFinance
1 report critical

RomCom / Storm-0978 (Russia)

Cybercrime
Governmentdefensetechnology
1 report high

SafePay

Cybercrime
msp-it-servicesprofessional-servicesmanufacturing
1 report high

Sapphire Sleet (BlueNoroff)

Cybercrime
FinanceCritical Infrastructure
1 report high

Sandworm

Nation-State
Critical InfrastructureOT / ICSGovernment
1 report critical

Scattered Spider

Cybercrime
FinanceCommunicationsLegal & Professional
1 report high

Screening Serpens

Cybercrime
CommunicationsCritical Infrastructure
1 report high

Secret Blizzard (Turla)

Cybercrime
Governmentdefencediplomatic
1 report critical

SHADOW-EARTH-053

Nation-State
Critical InfrastructureCommunications
1 report high

Storm-2603

Cybercrime
GovernmentFinanceprofessional-services
1 report high

Silk Typhoon

Nation-State
FinanceHealthcareCritical Infrastructure
1 report high

Silent Ransom Group

Cybercrime
Legal & ProfessionalFinance
1 report high

Star Blizzard (Callisto Group)

Cybercrime
Governmentcivil-societydefence
1 report high

NoName057(16)

Cybercrime
Critical InfrastructureCommunications
1 report high

Storm-2755

Cybercrime
Financeprofessional-servicesGovernment
1 report high

TA427 / Kimsuky

Cybercrime
Governmentdefencethink-tanks
1 report

TA4922

Cybercrime
FinanceGovernmentCritical Infrastructure
1 report high

Unknown East Asia-Linked APT

Nation-State
Governmentdiplomatic
1 report high

UAT-7810

Cybercrime
Critical InfrastructureCommunicationsGovernment
1 report high

UNC1549 (Screening Serpens / Nimbus Manticore)

Cybercrime
defenceCritical InfrastructureCommunications
1 report high

UNC3886

Nation-State
CommunicationsCritical Infrastructure
1 report critical

UNC6508

Cybercrime
HealthcareCritical Infrastructure
1 report high

UNC6671

Cybercrime
FinanceHealthcareCritical Infrastructure
1 report high

UTA0533

Cybercrime
GovernmentdefenseFinance
1 report critical

Velvet Ant

Cybercrime
Critical InfrastructureFinanceCommunications
1 report critical

Weaver Ant

Cybercrime
CommunicationsCritical Infrastructure
1 report critical

World Leaks (Hunters International)

Cybercrime
Critical Infrastructure
1 report high