Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
Show all countriesBlue Mockingbird
G0108Origin not attributed
22known attack methods
Last seenNot recorded
Inception
G0100Espionage
Also known as Inception Framework, Cloud Atlas
22known attack methods
Last seenNot recorded
Velvet Ant
G1047Origin not attributed
22known attack methods
Last seenNot recorded
Lotus Blossom
G0030Origin not attributed
Also known as DRAGONFISH, Spring Dragon, RADIUM, Raspberry Typhoon, Bilbug
21known attack methods
Last seenNot recorded
LazyScripter
G0140Origin not attributed
20known attack methods
Last seenNot recorded
Confucius
G0142Espionage
Also known as Confucius APT
19known attack methods
Last seenNot recorded
Windshift
G0112Origin not attributed
Also known as Bahamut
19known attack methods
Last seenNot recorded
Akira
G1024Financial gain, Data theft
Also known as GOLD SAHARA, PUNK SPIDER, Howling Scorpius
17known attack methods
Last seenNot recorded
BITTER
G1002Espionage
Also known as T-APT-17
16known attack methods
Last seenNot recorded
Molerats
G0021Origin not attributed
Also known as Operation Molerats, Gaza Cybergang
16known attack methods
Last seenNot recorded
Stealth Falcon
G0038Origin not attributed
16known attack methods
Last seenNot recorded
BackdoorDiplomacy
G0135Espionage
15known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin