Home › Threat Actors

Threat Actor Profiles

99 tracked threat actors across 130 intelligence reports.

Volt Typhoon

Nation-State
Critical InfrastructureCommunicationsOT / ICS
4 reports high

MuddyWater

Nation-State
GovernmentenergyCommunications
4 reports high

APT29

Nation-State
FinanceCommunicationsCritical Infrastructure
3 reports high

Cl0p

Cybercrime
Critical InfrastructureFinanceGovernment
3 reports high

Lazarus Group

Nation-State
TransportCritical InfrastructureFinance
3 reports high

UNC1549

Nation-State
CommunicationsCritical Infrastructuredefence
3 reports high

RansomHub

Cybercrime
HealthcareCritical InfrastructureFinance
3 reports critical

Qilin

Cybercrime
HealthcareFinanceCommunications
3 reports critical

ShinyHunters

Cybercrime
educationHealthcareFinance
3 reports critical

APT28

Nation-State
GovernmentdefenceCritical Infrastructure
2 reports critical

APT34

Nation-State
energyCommunicationsGovernment
2 reports high

APT42

Nation-State
Critical InfrastructureGovernmentHealthcare
2 reports high

CyberAv3ngers

Cybercrime
Critical InfrastructureOT / ICSwater-utilities
2 reports high

FSB Center 16

Cybercrime
CommunicationsenergyFinance
2 reports high

The Gentlemen

Cybercrime
HealthcareFinanceCritical Infrastructure
2 reports high

Void Blizzard

Cybercrime
GovernmentdefenseHealthcare
2 reports high

LockBit

Cybercrime
Critical InfrastructureHealthcareFinance
2 reports critical

TeamPCP

Cybercrime
FinanceCommunicationsCritical Infrastructure
2 reports critical

SafePay

Cybercrime
Critical Infrastructuremsp-it-servicesprofessional-services
2 reports high

Salt Typhoon

Nation-State
CommunicationsGovernment
2 reports critical

8Base

Cybercrime
professional-servicesmanufacturingHealthcare
1 report medium

Akira

Cybercrime
professional-servicesmanufacturingHealthcare
1 report high

APT10

Nation-State
GovernmentLegal & ProfessionalCritical Infrastructure
1 report high

Anubis

Cybercrime
HealthcareGovernmentFinance
1 report critical

APT29 (Midnight Blizzard), attributed by Sekoia with moderate to high confidence

Nation-State
Critical Infrastructure
1 report high

APT39

Nation-State
telecommunicationstravel-hospitalityGovernment
1 report medium

APT36

Nation-State
CommunicationsCritical Infrastructure
1 report high

APT33

Nation-State
energyGovernmentaerospace-defense
1 report medium

APT40 (Kryptonite Panda / TEMP.Periscope)

Nation-State
defensemaritimeacademia
1 report high

APT41

Nation-State
HealthcareFinanceCommunications
1 report critical

Armored Likho

Cybercrime
Critical InfrastructureOT / ICSGovernment
1 report high

BianLian

Cybercrime
professional-servicesHealthcaremanufacturing
1 report high

TraderTraitor

Cybercrime
Finance
1 report critical

Black Basta

Cybercrime
Healthcaremanufacturingprofessional-services
1 report high

Unnamed lone operator of the BOSSAI mesh, assessed by Acronis TRU with high confidence to be one person based in Hualien City, Taiwan

Cybercrime
HealthcareCritical Infrastructure
1 report high

Cadet Blizzard

Cybercrime
GovernmentCritical Infrastructuredefence
1 report critical

Project CAV3RN (unattributed)

Cybercrime
GovernmentCritical InfrastructureCommunications
1 report high

Cicada3301

Cybercrime
FinanceHealthcareLegal & Professional
1 report critical

CL-STA-1178

Cybercrime
Critical Infrastructure
1 report high

DPRK IT Worker Networks (UNC5267 / Nickel Tapestry)

Cybercrime
FinanceCommunicationsHealthcare
1 report high

DeadLock

Cybercrime
FinanceHealthcaremanufacturing
1 report critical

DragonForce (Hackledorb)

Cybercrime
FinanceCommunications
1 report high

Emperador

Cybercrime
Critical InfrastructureCommunications
1 report medium

Flax Typhoon

Nation-State
energyGovernmenteducation
1 report high

FIN7

Cybercrime
FinanceLegal & Professional
1 report high

FulcrumSec

Cybercrime
technologypharmaceuticalmanufacturing
1 report high

Gamaredon

Cybercrime
Critical InfrastructureCommunicationsOT / ICS
1 report high

Iran-nexus (GigaWiper/BLUERABBIT)

Cybercrime
Critical InfrastructureHealthcareCommunications
1 report high

Hyadina (GodDamn / Beast / Monster)

Cybercrime
FinanceHealthcaremanufacturing
1 report high

GopherWhisper

Cybercrime
Governmentdiplomatic
1 report high

Gunra

Cybercrime
HealthcareFinanceGovernment
1 report critical

Harvester

Cybercrime
CommunicationsCritical Infrastructure
1 report high

Handala

Cybercrime
Critical InfrastructureOT / ICS
1 report high

Head Mare

Cybercrime
Critical InfrastructureCommunicationsTransport
1 report high

Icarus

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report high

Interlock

Cybercrime
Healthcareeducationmanufacturing
1 report critical

INC Ransom

Cybercrime
HealthcareFinanceCritical Infrastructure
1 report high

JADEPUFFER

Cybercrime
Critical InfrastructureFinance
1 report critical

Jewelbug (Earth Alux / Ink Dragon / REF7707 / CL-STA-0049)

Cybercrime
CommunicationsCritical InfrastructureFinance
1 report high

knaithe/KnYuan

Cybercrime
ai-infrastructuretechnologyfinancial-services
1 report high

Linen Typhoon

Nation-State
telecommunicationsGovernmentdefense
1 report critical

Lurking Lizard

Cybercrime
FinanceCritical InfrastructureCommunications
1 report high

Spearwing

Cybercrime
HealthcareeducationFinance
1 report high

KongTuke

Cybercrime
FinanceCritical Infrastructure
1 report high

Mustang Panda

Nation-State
CommunicationsCritical InfrastructureTransport
1 report high

NadMesh

Cybercrime
technologyFinancecloud
1 report high

Nitrogen/Azote

Cybercrime
manufacturingprofessional-servicestechnology
1 report high

DriveSurge

Cybercrime
FinanceCritical Infrastructure
1 report critical

Phantom Taurus

Nation-State
CommunicationsCritical Infrastructure
1 report critical

Pioneer Kitten / Fox Kitten

Nation-State
HealthcareFinanceCritical Infrastructure
1 report high

Play

Cybercrime
professional-servicesmanufacturingCritical Infrastructure
1 report high

China-aligned (unattributed)

Cybercrime
FinanceCritical InfrastructureCommunications
1 report high

Contagious Interview / Famous Chollima (North Korea)

Cybercrime
FinanceCommunicationsCritical Infrastructure
1 report high

RomCom / Storm-0978 (Russia)

Cybercrime
Governmentdefensetechnology
1 report high

Sandworm

Nation-State
Critical InfrastructureOT / ICSGovernment
1 report critical

Sapphire Sleet (BlueNoroff)

Cybercrime
FinanceCritical Infrastructure
1 report high

Scattered Spider

Cybercrime
FinanceCommunicationsLegal & Professional
1 report high

Secret Blizzard (Turla)

Cybercrime
Governmentdefencediplomatic
1 report critical

SHADOW-EARTH-053

Nation-State
Critical InfrastructureCommunications
1 report high

Storm-2603

Cybercrime
GovernmentFinanceprofessional-services
1 report high

Silent Ransom Group

Cybercrime
Legal & ProfessionalFinance
1 report high

Silk Typhoon

Nation-State
FinanceHealthcareCritical Infrastructure
1 report high

Star Blizzard (Callisto Group)

Cybercrime
Governmentcivil-societydefence
1 report high

NoName057(16)

Cybercrime
Critical InfrastructureCommunications
1 report high

Storm-0940

Cybercrime
FinanceCritical InfrastructureCommunications
1 report high

Storm-2755

Cybercrime
Financeprofessional-servicesGovernment
1 report high

TA427 / Kimsuky

Cybercrime
Governmentdefencethink-tanks
1 report

TA4922

Cybercrime
FinanceGovernmentCritical Infrastructure
1 report high

Unknown East Asia-Linked APT

Nation-State
Governmentdiplomatic
1 report high

UAC-0099

Cybercrime
transportationmanufacturingenergy
1 report high

UAT-7810

Cybercrime
Critical InfrastructureCommunicationsGovernment
1 report high

UNC3886

Nation-State
CommunicationsCritical Infrastructure
1 report critical

UNC6508

Cybercrime
HealthcareCritical Infrastructure
1 report high

UTA0533

Cybercrime
GovernmentdefenseFinance
1 report critical

BYOD (self-identified, unverified)

Cybercrime
Healthcare
1 report high

UNC6671

Cybercrime
FinanceHealthcareCritical Infrastructure
1 report high

Velvet Ant

Cybercrime
Critical InfrastructureFinanceCommunications
1 report critical

Weaver Ant

Cybercrime
CommunicationsCritical Infrastructure
1 report critical

World Leaks (Hunters International)

Cybercrime
Critical Infrastructure
1 report high