Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
176 groups. Select a country to see its groups.
BlackByte
G1043Origin not attributed
Also known as Hecamede
48known attack methods
Last seenNot recorded
Ember Bear
G1003Russia · Espionage, Sabotage
Also known as UNC2589, Bleeding Bear, DEV-0586, Cadet Blizzard, Frozenvista
47known attack methods
Last seenNot recorded
menuPass
G0045Origin not attributed
Also known as Cicada, POTASSIUM, Stone Panda, APT10, Red Apollo
46known attack methods
Last seenNot recorded
ShinyHunters
G1057Financial gain
Also known as UNC6240, Bling Libra
46known attack methods
Last seenNot recorded
APT3
G0022China
Also known as Gothic Panda, Pirpi, UPS Team, Buckeye, Threat Group-0110
44known attack methods
Last seenNot recorded
Earth Lusca
G1006China · Espionage, Financial gain
Also known as TAG-22, Charcoal Typhoon, CHROMIUM, ControlX
44known attack methods
Last seenNot recorded
HAFNIUM
G0125China · Espionage
Also known as Operation Exchange Marauder, Silk Typhoon
44known attack methods
Last seenNot recorded
LAPSUS$
G1004Financial gain, Sabotage
Also known as DEV-0537, Strawberry Tempest
43known attack methods
Last seenNot recorded
Storm-0501
G1053Financial gain
42known attack methods
Last seenNot recorded
Fox Kitten
G0117Iran
Also known as UNC757, Parisite, Pioneer Kitten, RUBIDIUM, Lemon Sandstorm
41known attack methods
Last seenNot recorded
Patchwork
G0040Espionage
Also known as Hangover Group, Dropping Elephant, Chinastrats, MONSOON, Operation Hangover
41known attack methods
Last seenNot recorded
RedCurl
G1039Russia · Espionage, Data theft
41known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin