Threat Actors

SMBManufacturingProfessional ServicesFinance+2

aka 8Base Ransomware

Akira

Small and Medium BusinessManufacturingFinancial ServicesHealthcare+3

aka Akira Ransomware, Storm-1567

Andariel

DefenseAerospaceHealthcareEnergy+3

aka Onyx Sleet, Silent Chollima, Plutonium +3

Anonymous

GovernmentLaw EnforcementFinancialMedia+2

mediumLast seen: 2025

aka Anonymous Collective, Anon, Anons

4 articles

APT1

AerospaceDefenseEnergyFinancial Services+4

criticalLast seen: 2013

aka Comment Crew, Comment Panda, PLA Unit 61398 +2

APT10

Managed Service ProvidersGovernmentDefenseHealthcare+5

aka Stone Panda, MenuPass, Red Apollo +4

APT28

GovernmentMilitaryDefenseMedia+4

aka Fancy Bear, Sofacy, Sednit +5

12 articles

APT29

GovernmentDiplomatic EntitiesTechnologyThink Tanks+4

aka Cozy Bear, Midnight Blizzard, Nobelium +5

APT33

AerospaceAviationDefenseEnergy+4

aka Elfin, Magnallium, Refined Kitten +3

1 article

APT37

JournalistsActivistsDefectorsGovernment+4

aka Reaper, ScarCruft, Ricochet Chollima +5

3 articles

APT40

DefenseMaritimeGovernmentAviation+5

aka Leviathan, Gingham Typhoon, Kryptonite Panda +6

APT41

HealthcareTechnologyTelecommunicationsGaming+6

aka Double Dragon, Wicked Panda, Brass Typhoon +5

1 article

Aquatic Panda

TechnologyTelecommunicationsGovernmentDefense+3

aka Charcoal Typhoon, Bronze University, ControlX

BianLian

HealthcareFinancial ServicesProfessional ServicesManufacturing+3

aka BianLian Ransomware, White Rabbit (disputed), TA4903 (partial overlap)

Black Basta

ManufacturingConstructionHealthcareFinancial Services+3

aka Dahlia Spider, Storm-0506, UNC4393

BlackCat

HealthcareFinancial ServicesLegalManufacturing+3

aka ALPHV, Noberus, Sphynx

1 article

BlackSuit

Critical InfrastructureHealthcareEducationGovernment+2

aka BlackSuit Ransomware

Charming Kitten

GovernmentJournalistsActivistsAcademia+4

aka APT35, Phosphorus, Mint Sandstorm +5

1 article

Cl0p

Financial ServicesHealthcareGovernmentEducation+3

aka Clop, TA505, Lace Tempest +2

Conti

HealthcareGovernmentCritical InfrastructureManufacturing+3

highLast seen: 2022

aka Wizard Spider, Gold Blackburn, DEV-0193 +1

1 article

Cyber Av3ngers

Water UtilitiesIndustrial Control SystemsCritical InfrastructureIsrael-linked Technology

aka CyberAv3ngers, Cyber Avengers, IRGC Cyber Front

Ember Bear

GovernmentMilitaryEnergyFinancial Services+3

aka UAC-0056, Lorec53, Bleeding Bear +3

Equation Group

GovernmentTelecommunicationsAerospaceEnergy+4

🇺🇸

criticalLast seen: 2016

aka EQGRP, Tilded Platform, Lamberts

Evil Corp

Financial ServicesInsuranceBankingHealthcare+2

aka Indrik Spider, Dridex Gang, Manatee Tempest +1

FIN11

Financial ServicesRetailRestaurantHealthcare+2

aka Cl0p Operator, DEV-0950, Lace Tempest

FIN12

HealthcareEducationFinancial ServicesGovernment+1

aka Pistol Tempest, DEV-0237, Wizard Spider Affiliate

FIN7

RetailHospitalityFinancial ServicesRestaurant+1

aka Carbanak, Sangria Tempest, Carbon Spider +2

Gamaredon

GovernmentMilitaryLaw EnforcementDiplomatic Entities+4

aka Primitive Bear, Aqua Blizzard, Shuckworm +5

GhostSec

ISIS InfrastructureGovernmentCritical InfrastructureFinancial+1

aka Ghost Security, GhostSec Collective, Ghost Security Group

IT Army of Ukraine

Russian GovernmentRussian MilitaryRussian FinancialRussian Infrastructure+1

🇺🇦

mediumLast seen: 2025

aka IT Army, Ukrainian IT Army

Killnet

NATO MembersUkraine SupportersUS GovernmentEU Government+2

mediumLast seen: 2025

aka Anonymous Russia, Killnet Collective, KillMilk

Kimsuky

GovernmentThink TanksAcademiaMedia+3

aka Velvet Chollima, Thallium, Emerald Sleet +3

Lapsus$

TechnologyTelecommunicationsGovernmentGaming+3

mediumLast seen: 2023

aka LAPSUS$, DEV-0537, Strawberry Tempest

1 article

Lazarus Group

Financial ServicesCryptocurrencyDefenseEntertainment+2

aka Hidden Cobra, Zinc, Diamond Sleet +4

LockBit

HealthcareManufacturingFinancial ServicesGovernment+3

aka LockBit 2.0, LockBit 3.0, LockBit Black +2

Magecart

E-CommerceRetailHospitalityAirline+2

aka Magecart Group, Web Skimmer Consortium

Medusa

EducationHealthcareGovernmentTechnology+3

aka Medusa Ransomware, MedusaLocker, SPIDERMESA

4 articles

MuddyWater

GovernmentTelecommunicationsEnergyDefense+3

aka Mercury, Static Kitten, Mango Sandstorm +3

11 articles

Mustang Panda

GovernmentNon-Governmental OrganizationsReligious OrganizationsTelecommunications+4

aka Bronze President, Stately Taurus, Earth Preta +5

OilRig

EnergyGovernmentFinancial ServicesTelecommunications+2

aka APT34, Helix Kitten, Hazel Sandstorm +4

1 article

Patchwork

🇮🇳

GovernmentDefenseDiplomaticThink Tanks+4

aka Dropping Elephant, Chinastrats, Monsoon +3

Phobos

Small BusinessMedium BusinessMunicipal GovernmentHealthcare+3

aka Phobos Ransomware, Eking, Eight +4

4 articles

Play

GovernmentManufacturingTechnologyLegal+4

aka Play Ransomware, PlayCrypt, Balloonfly

9 articles

POLONIUM

🇱🇧

DefenseInformation TechnologyLegalFinancial Services+3

aka Plaid Rain, Flax Typhoon (partial overlap)

REvil

TechnologyLegalManufacturingHealthcare+3

highLast seen: 2022

aka Sodinokibi, Pinchy Spider, Gold Southfield +1

Rhysida

HealthcareEducationGovernmentManufacturing+3

aka Rhysida Ransomware, Vice Society (successor relationship)

Royal

HealthcareCritical InfrastructureEducationManufacturing+4

aka Royal Ransomware, BlackSuit, Dev-0569 +1

1 article

Salt Typhoon

TelecommunicationsGovernmentHospitalityInternet Service Providers+1

aka GhostEmperor, FamousSparrow, Earth Estries +1

1 article

Sandworm

EnergyGovernmentCritical InfrastructureTransportation+4

aka Iridium, Voodoo Bear, Seashell Blizzard +5

1 article

Scattered Spider

TelecommunicationsTechnologyHospitalityEntertainment+3

aka Octo Tempest, UNC3944, 0ktapus +3

ShinyHunters

TechnologyE-CommerceCloud ServicesFinancial Services+2

aka Shiny Hunters, ShinyCorp

12 articles

Sidewinder

🇮🇳

MilitaryGovernmentDiplomaticDefense+3

aka Rattlesnake, T-APT-04, Razor Tiger +2

SilverTerrier

🇳🇬

Financial ServicesHealthcareReal EstateLegal+2

aka Nigerian BEC, Wire-Wire, TA458

TA577

FinanceManufacturingTransportationHealthcare+2

Turla

GovernmentDiplomatic EntitiesMilitaryResearch Institutions+4

aka Snake, Venomous Bear, Secret Blizzard +5

Vice Society

EducationHealthcareManufacturingRetail+1

aka DEV-0832, Vanilla Tempest

Volt Typhoon

Critical InfrastructureCommunicationsEnergyWater+2

aka Vanguard Panda, BRONZE SILHOUETTE, DEV-0391 +2

Wizard Spider