Threat Actor Profiles

aka Wicked Panda, Barium, Winnti, Double Dragon

aka Mango Sandstorm, Mercury, Static Kitten, TEMP.Zagros

aka HIDDEN COBRA, Zinc, Labyrinth Chollima, APT38

aka Fancy Bear, Forest Blizzard, Sofacy, Sednit, Pawn Storm, STRONTIUM

aka Bronze Silhouette, Vanguard Panda, INSIDIOUS TAURUS

aka GhostEmperor, FamousSparrow

aka APT35, Mint Sandstorm, Phosphorus, TA453

aka UNC3944, 0ktapus, Roasted 0ktapus, Star Fraud

aka TA505, Clop, FIN11

aka ALPHV, Noberus, Sphynx

aka Snake, Venomous Bear, KRYPTON, Secret Blizzard

aka Velvet Chollima, Emerald Sleet, Black Banshee, Thallium

aka Voodoo Bear, IRIDIUM, Seashell Blizzard, TeleBots

aka Vice Society successor

aka Sodinokibi, Gold Southfield, Pinchy Spider

aka Cozy Bear, Midnight Blizzard, NOBELIUM, The Dukes, Dark Halo

aka DEV-0537, Storm-0537

aka Bronze President, Stately Taurus, RedDelta, TEMP.Hex

aka Storm-1567

aka MedusaLocker, Medusa Team

aka Carbon Spider sub, BlackMatter

aka Wizard Spider, Gold Ulrick, ITG23

aka Avaddon rebrand

aka Charming Kitten, APT35, Phosphorus

aka APT34, Helix Kitten, Hazel Sandstorm, Crambus

aka Rattlesnake, T-APT-04, Razor Tiger

aka LockBit 3.0, LockBit Black, LockBit Green

aka Cardinal, Storm-1811

aka Storm-0678, DEV-0569

aka PlayCrypt, Balloonfly

aka

aka Carbanak, ITG14, Carbon Spider

aka Hive0065, Graceful Spider

aka Mummy Spider, TA542, Heodo

aka Qbot, QuakBot, Pinkslipbot

aka

aka Callisto Group, COLDRIVER, Seaborgium, TA446

aka APT33, Elfin, Refined Kitten, Holmium

aka Primitive Bear, Aqua Blizzard, Actinium, Shuckworm

aka DEV-0139, Labyrinth Chollima sub

aka Zinc, Lazarus sub

aka Storm-0856, DEV-0856

aka DEV-0832, Storm-0832