Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
176 groups. Select a country to see its groups.
Turla
G0010Russia · Espionage
Also known as IRON HUNTER, Group 88, Waterbug, WhiteBear, Snake
68known attack methods
Last seenNot recorded
FIN7
G0046Origin not attributed
Also known as GOLD NIAGARA, ITG14, Carbon Spider, ELBRUS, Sangria Tempest
67known attack methods
Last seenNot recorded
Wizard Spider
G0102Russia · Financial gain
Also known as UNC1878, TEMP.MixMaster, Grim Spider, FIN12, GOLD BLACKBURN
64known attack methods
Last seenNot recorded
Chimera
G0114China
59known attack methods
Last seenNot recorded
Medusa Group
G1051Financial gain, Data theft
57known attack methods
Last seenNot recorded
Threat Group-3390
G0027China
Also known as Earth Smilodon, TG-3390, Emissary Panda, BRONZE UNION, APT27
57known attack methods
Last seenNot recorded
APT38
G0082North Korea · Sabotage
Also known as NICKEL GLADSTONE, BeagleBoyz, Bluenoroff, Stardust Chollima, Sapphire Sleet
56known attack methods
Last seenNot recorded
Dragonfly
G0035Russia · Espionage
Also known as TEMP.Isotope, DYMALLOY, Berserk Bear, TG-4192, Crouching Yeti
56known attack methods
Last seenNot recorded
TeamTNT
G0139Origin not attributed
56known attack methods
Last seenNot recorded
Contagious Interview
G1052Espionage, Financial gain
Also known as DeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan, DEV#POPPER, PurpleBravo
54known attack methods
Last seenNot recorded
APT39
G0087Espionage
Also known as ITG07, Chafer, Remix Kitten
53known attack methods
Last seenNot recorded
FIN13
G1016Financial gain
Also known as Elephant Beetle
53known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin