Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
176 groups. Select a country to see its groups.
Sea Turtle
G1041Espionage
Also known as Teal Kurma, Marbled Dust, Cosmic Wolf, SILICON
27known attack methods
Last seenNot recorded
Winter Vivern
G1035Russia
Also known as TA473, UAC-0114
27known attack methods
Last seenNot recorded
Play
G1040Financial gain, Data theft
26known attack methods
Last seenNot recorded
WIRTE
G0090Espionage, Sabotage
Also known as Ashen Lepus
26known attack methods
Last seenNot recorded
INC Ransom
G1032Financial gain
Also known as GOLD IONIC
25known attack methods
Last seenNot recorded
ToddyCat
G1022Origin not attributed
25known attack methods
Last seenNot recorded
Darkhotel
G0012South Korea · Espionage
Also known as DUBNIUM, Zigzag Hail
24known attack methods
Last seenNot recorded
APT1
G0006China
Also known as Comment Crew, Comment Group, Comment Panda
23known attack methods
Last seenNot recorded
Agrius
G1030Iran · Sabotage
Also known as Pink Sandstorm, AMERICIUM, Agonizing Serpens, BlackShadow
22known attack methods
Last seenNot recorded
Blue Mockingbird
G0108Origin not attributed
22known attack methods
Last seenNot recorded
Inception
G0100Espionage
Also known as Inception Framework, Cloud Atlas
22known attack methods
Last seenNot recorded
Velvet Ant
G1047Origin not attributed
22known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin