Equation Group
Equation Group is an United States-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 12 sectors, including Government and Technology, in 74 countries, including the United States and the United Kingdom. It uses 4 MITRE ATT&CK techniques and exploits 18 known CVEs.
Also known as
- APT60
- G0020
- EQGRP
- Tilded Team
- Equation
- Platinum Colony
- APT-C-40
- Origin
- United States
- Techniques
- 4
- Exploited CVEs
- 18
- First seen
- Jan 1, 2001
- Last seen
- Feb 16, 2015
- Record updated
Who They Target.
Sectors · 12
Countries · 74
Labelsair-gap-collectionbdef-qf:trendingespionagefirmware-persistencehigh-sophisticationhistoricalzero-day
About Equation Group.
MITRE describes the group as using multiple remote access tools, zero-day exploits, and a capability to overwrite hard disk drive firmware. Treat the actor as historical unless internal reporting provides post-2015 operational evidence.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.