Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
176 groups. Select a country to see its groups.
APT42
G1044Iran · Espionage, Data theft
32known attack methods
Last seenNot recorded
APT33
G0064Iran
Also known as HOLMIUM, Elfin, Peach Sandstorm
31known attack methods
Last seenNot recorded
GALLIUM
G0093Espionage
Also known as Granite Typhoon
31known attack methods
Last seenNot recorded
Storm-1811
G1046Origin not attributed
31known attack methods
Last seenNot recorded
Moonstone Sleet
G1036North Korea · Espionage, Financial gain
Also known as Storm-1789
30known attack methods
Last seenNot recorded
Sidewinder
G0121India
Also known as T-APT-04, Rattlesnake
30known attack methods
Last seenNot recorded
APT37
G0067North Korea · Espionage
Also known as InkySquid, ScarCruft, Reaper, Group123, TEMP.Reaper
29known attack methods
Last seenNot recorded
ZIRCONIUM
G0128China
Also known as APT31, Violet Typhoon
29known attack methods
Last seenNot recorded
Higaisa
G0126Origin not attributed
28known attack methods
Last seenNot recorded
LuminousMoth
G1014China · Espionage
28known attack methods
Last seenNot recorded
Silence
G0091Financial gain
Also known as Whisper Spider
28known attack methods
Last seenNot recorded
TA2541
G1018Origin not attributed
28known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin