Skip to content
Threat actors by targeted sector

Threat Actors Targeting The Civil Society and NGOs Sector.

Brandefense tracks 91 threat actors known to target the Civil Society and NGOs sector. The most documented are Kimsuky, APT28 and Lazarus Group.

24 of 42 published profiles shown

OilRigIran
aka COBALT GYPSY · IRN2 · Helix Kitten +7
Nation-state APTEspionage

OilRig is an Iran-attributed nation-state APT group with an espionage motive.

188TTPs
34exploited
102malware
AdvancedProfile →
APT32Vietnam
aka SeaLotus · APT-C-00 · Canvas Cyclone +12
Nation-state APTEspionage

APT32 is a Vietnam-attributed nation-state APT group with an espionage motive.

169TTPs
22exploited
50malware
AdvancedProfile →
Transparent TribePakistan
aka Copper Fieldstone · C-Major · APT36 +13
Nation-state APTEspionage

Transparent Tribe is a Pakistan-attributed nation-state APT group with an espionage motive.

165TTPs
5exploited
106malware
AdvancedProfile →
AndarielNorth Korea
aka Silent Chollima · PLUTONIUM · Onyx Sleet +16
Nation-state APTEspionage

Andariel is a North Korea-attributed nation-state APT group with an espionage motive.

95TTPs
37exploited
96malware
AdvancedProfile →
Earth LuscaChina
aka TAG-22 · Charcoal Typhoon · CHROMIUM +1
Nation-state APTEspionage

Earth Lusca is a China-attributed nation-state APT group with an espionage motive.

93TTPs
37exploited
83malware
AdvancedProfile →
menuPassChina
aka Cicada · POTASSIUM · Stone Panda +5
Nation-state APTEspionage

menuPass is a China-attributed nation-state APT group with an espionage motive.

100TTPs
22exploited
75malware
AdvancedProfile →
APT42Iran
aka GreenBravo
Nation-state APTEspionage

APT42 is an Iran-attributed nation-state APT group with an espionage motive.

112TTPs
6exploited
52malware
AdvancedProfile →
PatchworkIndia
aka Hangover Group · Dropping Elephant · Chinastrats +16
Nation-state APTEspionage

Patchwork is an India-attributed nation-state APT group with an espionage motive.

99TTPs
12exploited
47malware
AdvancedProfile →
APT33Iran
aka HOLMIUM · Elfin · Peach Sandstorm +4
Nation-state APTEspionage

APT33 is an Iran-attributed nation-state APT group with an espionage motive.

91TTPs
17exploited
50malware
AdvancedProfile →
SideCopyPakistan
Nation-state APTEspionage

SideCopy is a Pakistan-attributed nation-state APT group with an espionage motive.

96TTPs
7exploited
51malware
AdvancedProfile →
UAC-0056Russia
aka Storm-0587 · TA471 · Lorec53 +12
Nation-state APTEspionage

UAC-0056 is a Russia-attributed nation-state APT group with an espionage motive.

87TTPs
15exploited
16malware
AdvancedProfile →
Aquatic PandaChina
aka Bronze University · G0143
Nation-state APTEspionage

Aquatic Panda is a China-attributed nation-state APT group with an espionage motive.

80TTPs
19exploited
29malware
AdvancedProfile →
InceptionRussia
aka Inception Framework · Cloud Atlas · Oxygen +7
Nation-state APTEspionage

Inception is a Russia-attributed nation-state APT group with an espionage motive.

91TTPs
7exploited
36malware
AdvancedProfile →
Ke3changChina
aka APT15 · Mirage · Vixen Panda +5
Nation-state APTEspionage

Ke3chang is a China-attributed nation-state APT group with an espionage motive.

88TTPs
2exploited
31malware
AdvancedProfile →
APT3China
aka Gothic Panda · Pirpi · UPS Team +13
Nation-state APTEspionage

APT3 is a China-attributed nation-state APT group with an espionage motive.

74TTPs
10exploited
16malware
AdvancedProfile →
Void ManticoreIran
aka COBALT MYSTIQUE · Handala Hack · BANISHED KITTEN +2
Nation-state APTEspionage

Void Manticore is an Iran-attributed nation-state APT group with an espionage motive.

67TTPs
8exploited
21malware
AdvancedProfile →
Sea TurtleTürkiye
aka Teal Kurma · Cosmic Wolf · SILICON +2
Nation-state APTEspionage

Sea Turtle is a Türkiye-attributed nation-state APT group with an espionage motive.

62TTPs
6exploited
8malware
AdvancedProfile →
MirrorFaceChina
aka Earth Kasha · Operation LiberalFace · Operation “AkaiRyū”
Nation-state APTEspionage

MirrorFace is a China-attributed nation-state APT group with an espionage motive.

47TTPs
9exploited
29malware
AdvancedProfile →
APT19China
aka Codoso · C0d0so0 · Codoso Team +5
Nation-state APTEspionage

APT19 is a China-attributed nation-state APT group with an espionage motive.

38TTPs
9exploited
17malware
AdvancedProfile →
DarkHotelSouth Korea
aka DUBNIUM · Zigzag Hail · APT-Q-14
Nation-state APTEspionage

DarkHotel is a South Korea-attributed nation-state APT group with an espionage motive.

30TTPs
16exploited
18malware
AdvancedProfile →
APT-C-23
aka Desert Falcon · TAG-63 · Grey Karkadann +15
Nation-state APTEspionage

APT-C-23 is a nation-state APT group with an espionage motive.

40TTPs
2exploited
21malware
AdvancedProfile →
APT17China
aka Deputy Dog · Aurora Panda · Hidden Lynx +2
Nation-state APTEspionage

APT17 is a China-attributed nation-state APT group with an espionage motive.

18TTPs
22exploited
35malware
AdvancedProfile →
Tonto TeamChina
aka Earth Akhlut · BRONZE HUNTLEY · Karma Panda +1
Nation-state APTEspionage

Tonto Team is a China-attributed nation-state APT group with an espionage motive.

38TTPs
1exploited
10malware
AdvancedProfile →
TEMP.VelesRussia
aka XENOTIME · Triton Actor · ATK 91 +1
Nation-state APTEspionage

TEMP.Veles is a Russia-attributed nation-state APT group with an espionage motive.

29TTPs
1exploited
22malware
AdvancedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.