CyberBrief
Incident trackerVulnerabilities & CVEsSecurity newsThreat actor monitoringWeekly briefing
by FastnexaSubscribe
Incident trackerVulnerabilities & CVEsSecurity newsThreat actor monitoringWeekly briefingCompany trackerCyber governanceRegulatory tracker

Threat actor monitoring

The hacker groups behind the attacks

Hacker groups by country of origin

176 groups. Select a country to see its groups.

  1. China37
  2. Russia16
  3. Iran12
  4. North Korea7
  5. Lebanon3
  6. Pakistan3
  7. India1
  8. Nigeria1
  9. South Korea1
  10. Vietnam1
  11. Not attributed94
  • Whitefly

    G0107

    Espionage

    9known attack methods

    Last seenNot recorded

  • CopyKittens

    G0052

    Iran · Espionage

    8known attack methods

    Last seenNot recorded

  • MoustachedBouncer

    G1019

    Espionage

    8known attack methods

    Last seenNot recorded

  • Poseidon Group

    G0033

    Data theft

    8known attack methods

    Last seenNot recorded

  • DarkHydrus

    G0079

    Origin not attributed

    7known attack methods

    Last seenNot recorded

  • IndigoZebra

    G0136

    China · Espionage

    7known attack methods

    Last seenNot recorded

  • Nomadic Octopus

    G0133

    Russia · Espionage

    Also known as DustSquad

    7known attack methods

    Last seenNot recorded

  • POLONIUM

    G1005

    Lebanon

    Also known as Plaid Rain

    7known attack methods

    Last seenNot recorded

  • RTM

    G0048

    Origin not attributed

    7known attack methods

    Last seenNot recorded

  • The White Company

    G0089

    Espionage

    7known attack methods

    Last seenNot recorded

  • Windigo

    G0124

    Origin not attributed

    7known attack methods

    Last seenNot recorded

  • Ajax Security Team

    G0130

    Espionage

    Also known as Operation Woolen-Goldfish, AjaxTM, Rocket Kitten, Flying Kitten, Operation Saffron Rose

    6known attack methods

    Last seenNot recorded

176 hacker groups
←1…111213…15→

About this tracker

176
Hacker groups profiled
33
Ransomware gangs
10
Countries of origin

CyberBrief

Made by Fastnexa, a company that tests business security by trying to break in, then helps fix what it finds. The news comes from public sources. The ranking and the briefings are ours.

Talk to an expert

CyberBrief

  • Overview
  • Incident tracker
  • Vulnerabilities & CVEs
  • Security news
  • Threat actor monitoring
  • Weekly briefing
  • Company tracker
  • Cyber governance
  • Regulatory tracker
  • By industry
  • Subscribe

Security services

  • Penetration testing
  • Red teaming
  • Threat detection & response
  • Cloud security
  • Application security
  • DevSecOps
  • Privacy & compliance

Company

  • Fastnexa
  • About
  • Blog
  • Contact

CyberBrief gathers public security alerts and news. Every item links to where it came from. Times are UTC. It does not replace a security check of your own systems.

Data from MITRE ATT&CK®, Have I Been Pwned (CC BY 4.0), RansomLook (CC BY 4.0), CISA, NVD and FIRST EPSS.

© 2026 Fastnexa