PROMETHIUM
G0056Also known as StrongPity
11 documented techniques
EspionageSince 2012
Threat actors
Who is doing this, and how. Intrusion sets come from MITRE ATT&CK with the techniques each group is documented using, so a profile is a list of things to check rather than a description of something frightening. Extortion groups are counted from the victims they have named on their own leak sites.
- 176
- ATT&CK groups tracked
- 16
- Extortion groups
- 176
- Matching this view
DarkVishnya
G010510 documented techniques
Financial gain
Deep Panda
G0009Also known as Shell Crew, WebMasters, KungFu Kittens, PinkPanther
10 documented techniques
Origin: China
Aoqin Dragon
G10079 documented techniques
Origin: ChinaEspionageSince 2013
Carbanak
G0008Also known as Anunak
9 documented techniques
Since 2013
Elderwood
G0066Also known as Elderwood Gang, Beijing Group, Sneaky Panda
9 documented techniques
Origin: ChinaEspionage
GOLD SOUTHFIELD
G0115Also known as Pinchy Spider
9 documented techniques
Financial gainSince 2018
Metador
G10139 documented techniques
Espionage
Rancor
G00759 documented techniques
Sowbug
G00549 documented techniques
Since 2015
Whitefly
G01079 documented techniques
EspionageSince 2017
CopyKittens
G00528 documented techniques
Origin: IranEspionageSince 2013
MoustachedBouncer
G10198 documented techniques
EspionageSince 2014
Poseidon Group
G00338 documented techniques
Data theftSince 2005
DarkHydrus
G00797 documented techniques
Since 2016
IndigoZebra
G01367 documented techniques
Origin: ChinaEspionageSince 2014
Nomadic Octopus
G0133Also known as DustSquad
7 documented techniques
Origin: RussiaEspionageSince 2014
POLONIUM
G1005Also known as Plaid Rain
7 documented techniques
Origin: Lebanon
RTM
G00487 documented techniques
Since 2015
The White Company
G00897 documented techniques
Espionage
Windigo
G01247 documented techniques
Since 2011
Ajax Security Team
G0130Also known as Operation Woolen-Goldfish, AjaxTM, Rocket Kitten, Flying Kitten
6 documented techniques
EspionageSince 2010
Ferocious Kitten
G01376 documented techniques
Since 2015
Gallmaker
G00846 documented techniques
Espionage
Intrusion set data is from MITRE ATT&CK, which is maintained by MITRE and released for public use. Extortion group activity is derived from this tracker’s own incident records, sourced from RansomLook under CC BY 4.0.