Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
Show all countriesEXOTIC LILY
G1011Financial gain
15known attack methods
Last seenNot recorded
Salt Typhoon
G1045Origin not attributed
14known attack methods
Last seenNot recorded
TA551
G0127Origin not attributed
Also known as GOLD CABIN, Shathak
14known attack methods
Last seenNot recorded
Silent Librarian
G0122Origin not attributed
Also known as TA407, COBALT DICKENS
13known attack methods
Last seenNot recorded
APT18
G0026Origin not attributed
Also known as TG-0416, Dynamite Panda, Threat Group-0416
12known attack methods
Last seenNot recorded
FIN4
G0085Origin not attributed
12known attack methods
Last seenNot recorded
Malteiro
G1026Financial gain
12known attack methods
Last seenNot recorded
Mustard Tempest
G1020Origin not attributed
Also known as DEV-0206, TA569, GOLD PRELUDE, UNC1543
12known attack methods
Last seenNot recorded
Evilnum
G0120Financial gain
11known attack methods
Last seenNot recorded
FIN10
G0051Financial gain, Data theft
11known attack methods
Last seenNot recorded
FIN5
G0053Financial gain
11known attack methods
Last seenNot recorded
Machete
G0095Espionage
Also known as APT-C-43, El Machete
11known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin