APT16
G00231 documented techniques
Who is doing this, and how. Intrusion sets come from MITRE ATT&CK with the techniques each group is documented using, so a profile is a list of things to check rather than a description of something frightening. Extortion groups are counted from the victims they have named on their own leak sites.
1 documented techniques
1 documented techniques
1 documented techniques
1 documented techniques
Also known as Mantis, Arid Viper, Desert Falcon, TAG-63
0 documented techniques
0 documented techniques
0 documented techniques
Also known as XENOTIME
0 documented techniques
Intrusion set data is from MITRE ATT&CK, which is maintained by MITRE and released for public use. Extortion group activity is derived from this tracker’s own incident records, sourced from RansomLook under CC BY 4.0.