CyberBrief
Incident trackerVulnerabilities & CVEsSecurity newsThreat actor monitoringWeekly briefing
by FastnexaSubscribe
Incident trackerVulnerabilities & CVEsSecurity newsThreat actor monitoringWeekly briefingCompany trackerCyber governanceRegulatory tracker

Threat actor monitoring

The hacker groups behind the attacks

Hacker groups by country of origin

176 groups. Select a country to see its groups.

  1. China37
  2. Russia16
  3. Iran12
  4. North Korea7
  5. Lebanon3
  6. Pakistan3
  7. India1
  8. Nigeria1
  9. South Korea1
  10. Vietnam1
  11. Not attributed94
  • FIN5

    G0053

    Financial gain

    11known attack methods

    Last seenNot recorded

  • Machete

    G0095

    Espionage

    Also known as APT-C-43, El Machete

    11known attack methods

    Last seenNot recorded

  • PLATINUM

    G0068

    Origin not attributed

    11known attack methods

    Last seenNot recorded

  • DarkVishnya

    G0105

    Financial gain

    10known attack methods

    Last seenNot recorded

  • Deep Panda

    G0009

    China

    Also known as Shell Crew, WebMasters, KungFu Kittens, PinkPanther, Black Vine

    10known attack methods

    Last seenNot recorded

  • Aoqin Dragon

    G1007

    China · Espionage

    9known attack methods

    Last seenNot recorded

  • Carbanak

    G0008

    Origin not attributed

    Also known as Anunak

    9known attack methods

    Last seenNot recorded

  • Elderwood

    G0066

    China · Espionage

    Also known as Elderwood Gang, Beijing Group, Sneaky Panda

    9known attack methods

    Last seenNot recorded

  • GOLD SOUTHFIELD

    G0115

    Financial gain

    Also known as Pinchy Spider

    9known attack methods

    Last seenNot recorded

  • Metador

    G1013

    Espionage

    9known attack methods

    Last seenNot recorded

  • Rancor

    G0075

    Origin not attributed

    9known attack methods

    Last seenNot recorded

  • Sowbug

    G0054

    Origin not attributed

    9known attack methods

    Last seenNot recorded

176 hacker groups
←1…101112…15→

About this tracker

176
Hacker groups profiled
33
Ransomware gangs
10
Countries of origin

CyberBrief

Made by Fastnexa, a company that tests business security by trying to break in, then helps fix what it finds. The news comes from public sources. The ranking and the briefings are ours.

Talk to an expert

CyberBrief

  • Overview
  • Incident tracker
  • Vulnerabilities & CVEs
  • Security news
  • Threat actor monitoring
  • Weekly briefing
  • Company tracker
  • Cyber governance
  • Regulatory tracker
  • By industry
  • Subscribe

Security services

  • Penetration testing
  • Red teaming
  • Threat detection & response
  • Cloud security
  • Application security
  • DevSecOps
  • Privacy & compliance

Company

  • Fastnexa
  • About
  • Blog
  • Contact

CyberBrief gathers public security alerts and news. Every item links to where it came from. Times are UTC. It does not replace a security check of your own systems.

Data from MITRE ATT&CK®, Have I Been Pwned (CC BY 4.0), RansomLook (CC BY 4.0), CISA, NVD and FIRST EPSS.

© 2026 Fastnexa