Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
Show all countriesOilRig
G0049Iran
Also known as COBALT GYPSY, IRN2, APT34, Helix Kitten, Evasive Serpens
76known attack methods
Last seen2022-12
Magic Hound
G0059Iran · Espionage
Also known as TA453, COBALT ILLUSION, Charming Kitten, ITG18, Phosphorus
78known attack methods
Last seenNot recorded
Fox Kitten
G0117Iran
Also known as UNC757, Parisite, Pioneer Kitten, RUBIDIUM, Lemon Sandstorm
41known attack methods
Last seenNot recorded
APT42
G1044Iran · Espionage, Data theft
32known attack methods
Last seenNot recorded
APT33
G0064Iran
Also known as HOLMIUM, Elfin, Peach Sandstorm
31known attack methods
Last seenNot recorded
Agrius
G1030Iran · Sabotage
Also known as Pink Sandstorm, AMERICIUM, Agonizing Serpens, BlackShadow
22known attack methods
Last seenNot recorded
CURIUM
G1012Iran
Also known as Crimson Sandstorm, TA456, Tortoise Shell, Yellow Liderc
19known attack methods
Last seenNot recorded
Leafminer
G0077Iran
Also known as Raspite
17known attack methods
Last seenNot recorded
Moses Staff
G1009Iran
Also known as DEV-0500, Marigold Sandstorm
12known attack methods
Last seenNot recorded
CopyKittens
G0052Iran · Espionage
8known attack methods
Last seenNot recorded
Cleaver
G0003Iran
Also known as Threat Group 2889, TG-2889
5known attack methods
Last seenNot recorded
Group5
G0043Iran
4known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin