Threat actor monitoring
The hacker groups behind the attacks
Hacker groups by country of origin
176 groups. Select a country to see its groups.
APT19
G0073China
Also known as Codoso, C0d0so0, Codoso Team, Sunshop Group
21known attack methods
Last seenNot recorded
Lotus Blossom
G0030Origin not attributed
Also known as DRAGONFISH, Spring Dragon, RADIUM, Raspberry Typhoon, Bilbug
21known attack methods
Last seenNot recorded
LazyScripter
G0140Origin not attributed
20known attack methods
Last seenNot recorded
Star Blizzard
G1033Russia · Espionage
Also known as SEABORGIUM, Callisto Group, TA446, COLDRIVER
20known attack methods
Last seenNot recorded
Cinnamon Tempest
G1021China · Espionage, Financial gain
Also known as DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT
19known attack methods
Last seenNot recorded
Confucius
G0142Espionage
Also known as Confucius APT
19known attack methods
Last seenNot recorded
CURIUM
G1012Iran
Also known as Crimson Sandstorm, TA456, Tortoise Shell, Yellow Liderc
19known attack methods
Last seenNot recorded
Windshift
G0112Origin not attributed
Also known as Bahamut
19known attack methods
Last seenNot recorded
Saint Bear
G1031Russia
Also known as Storm-0587, TA471, UAC-0056, Lorec53
18known attack methods
Last seenNot recorded
Akira
G1024Financial gain, Data theft
Also known as GOLD SAHARA, PUNK SPIDER, Howling Scorpius
17known attack methods
Last seenNot recorded
Daggerfly
G1034China
Also known as Evasive Panda, BRONZE HIGHLAND
17known attack methods
Last seenNot recorded
Leafminer
G0077Iran
Also known as Raspite
17known attack methods
Last seenNot recorded
About this tracker
- 176
- Hacker groups profiled
- 33
- Ransomware gangs
- 10
- Countries of origin