Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
176 groups. Select a country to see its groups.
VOID MANTICORE
G1055Sabotage
Also known as COBALT MYSTIQUE, Handala Hack, Homeland Justice, Karma, Karmabelow80
63known attack methods
Last seen2022-09
Leviathan
G0065China · Espionage
Also known as MUDCARP, Kryptonite Panda, Gadolinium, BRONZE MOHAWK, TEMP.Jumper
50known attack methods
Last seen2022-09
Transparent Tribe
G0134Pakistan
Also known as COPPER FIELDSTONE, APT36, Mythic Leopard, ProjectM
14known attack methods
Last seen2022-07
APT29
G0016Russia
Also known as IRON RITUAL, IRON HEMLOCK, NobleBaron, Dark Halo, NOBELIUM
66known attack methods
Last seen2021-01
Lazarus Group
G0032North Korea · Espionage, Financial gain
Also known as Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace, ZINC, NICKEL ACADEMY
93known attack methods
Last seen2020-08
TEMP.Veles
G0088Russia
Also known as XENOTIME
0known attack methods
Last seen2017-08
MirrorFace
G1054China · Espionage
Also known as Earth Kasha
43known attack methods
Last seen2004-09
Kimsuky
G0094North Korea · Espionage
Also known as Black Banshee, Velvet Chollima, Emerald Sleet, THALLIUM, APT43
130known attack methods
Last seenNot recorded
APT32
G0050Vietnam
Also known as SeaLotus, OceanLotus, APT-C-00, Canvas Cyclone, BISMUTH
78known attack methods
Last seenNot recorded
Magic Hound
G0059Iran · Espionage
Also known as TA453, COBALT ILLUSION, Charming Kitten, ITG18, Phosphorus
78known attack methods
Last seenNot recorded
Gamaredon Group
G0047Russia · Espionage
Also known as IRON TILDEN, Primitive Bear, ACTINIUM, Armageddon, Shuckworm
70known attack methods
Last seenNot recorded
MuddyWater
G0069Espionage
Also known as Earth Vetala, MERCURY, Static Kitten, Seedworm, TEMP.Zagros
68known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin