Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
176 groups. Select a country to see its groups.
UNC3886
G1048China · Espionage
49known attack methods
Last seen2025-03
Mustang Panda
G0129China · Espionage
Also known as TA416, RedDelta, BRONZE PRESIDENT, STATELY TAURUS, FIREANT
85known attack methods
Last seen2024-12
APT28
G0007Russia
Also known as IRON TWILIGHT, SNAKEMACKEREL, Swallowtail, Group 74, Sednit
93known attack methods
Last seen2024-11
Volt Typhoon
G1017China · Sabotage
Also known as BRONZE SILHOUETTE, Vanguard Panda, DEV-0391, UNC3236, Voltzite
81known attack methods
Last seen2024-08
APT41
G0096China · Espionage
Also known as Wicked Panda, Brass Typhoon, BARIUM
82known attack methods
Last seen2024-06
Ke3chang
G0004China
Also known as APT15, Mirage, Vixen Panda, GREF, Playful Dragon
46known attack methods
Last seen2024-05
APT5
G1023China · Espionage
Also known as Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD, Keyhole Panda, UNC2630
29known attack methods
Last seen2024-05
AppleJeus
G1049North Korea
Also known as Gleaming Pisces, Citrine Sleet, UNC1720, UNC4736
2known attack methods
Last seen2023-03
PROMETHIUM
G0056Espionage
Also known as StrongPity
11known attack methods
Last seen2023-01
OilRig
G0049Iran
Also known as COBALT GYPSY, IRN2, APT34, Helix Kitten, Evasive Serpens
76known attack methods
Last seen2022-12
Scattered Spider
G1015Financial gain
Also known as Roasted 0ktapus, Octo Tempest, Storm-0875, UNC3944
64known attack methods
Last seen2022-12
Sandworm Team
G0034Russia · Sabotage
Also known as ELECTRUM, Telebots, IRON VIKING, BlackEnergy (Group), Quedagh
79known attack methods
Last seen2022-10
About this tracker
- 176
- Hacker groups profiled
- 32
- Ransomware gangs
- 10
- Countries of origin