Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
Show all countriesAPT28
G0007Russia
Also known as IRON TWILIGHT, SNAKEMACKEREL, Swallowtail, Group 74, Sednit
93known attack methods
Last seen2024-11
Sandworm Team
G0034Russia · Sabotage
Also known as ELECTRUM, Telebots, IRON VIKING, BlackEnergy (Group), Quedagh
79known attack methods
Last seen2022-10
APT29
G0016Russia
Also known as IRON RITUAL, IRON HEMLOCK, NobleBaron, Dark Halo, NOBELIUM
66known attack methods
Last seen2021-01
TEMP.Veles
G0088Russia
Also known as XENOTIME
0known attack methods
Last seen2017-08
Gamaredon Group
G0047Russia · Espionage
Also known as IRON TILDEN, Primitive Bear, ACTINIUM, Armageddon, Shuckworm
70known attack methods
Last seenNot recorded
Turla
G0010Russia · Espionage
Also known as IRON HUNTER, Group 88, Waterbug, WhiteBear, Snake
68known attack methods
Last seenNot recorded
Wizard Spider
G0102Russia · Financial gain
Also known as UNC1878, TEMP.MixMaster, Grim Spider, FIN12, GOLD BLACKBURN
64known attack methods
Last seenNot recorded
Dragonfly
G0035Russia · Espionage
Also known as TEMP.Isotope, DYMALLOY, Berserk Bear, TG-4192, Crouching Yeti
56known attack methods
Last seenNot recorded
Ember Bear
G1003Russia · Espionage, Sabotage
Also known as UNC2589, Bleeding Bear, DEV-0586, Cadet Blizzard, Frozenvista
47known attack methods
Last seenNot recorded
RedCurl
G1039Russia · Espionage, Data theft
41known attack methods
Last seenNot recorded
Indrik Spider
G0119Russia
Also known as Evil Corp, Manatee Tempest, DEV-0243, UNC2165
33known attack methods
Last seenNot recorded
Winter Vivern
G1035Russia
Also known as TA473, UAC-0114
27known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin