Skip to content
Threat actors by type

Nation-state APT Threat Actors.

Brandefense tracks 294 nation-state APT groups. The most documented are Kimsuky, APT28 and Lazarus Group. The sectors they target most are Government, Defense and Aerospace, and Manufacturing.

72 of 260 published profiles shown

ConfuciusIndia
aka Confucius APT · G0142
Nation-state APTEspionage

Confucius is an India-attributed nation-state APT group with an espionage motive.

32TTPs
3exploited
15malware
AdvancedProfile →
APT1China
aka Comment Crew · Comment Group · Comment Panda +11
Nation-state APTEspionage

APT1 is a China-attributed nation-state APT group with an espionage motive.

32TTPs
1exploited
47malware
AdvancedProfile →
Ferocious KittenIran
aka G0137
Nation-state APTEspionage

Ferocious Kitten is an Iran-attributed nation-state APT group with an espionage motive.

31TTPs
1exploited
4malware
AdvancedProfile →
CyberAv3ngersIran
aka Soldiers of Soloman
Nation-state APTEspionage

CyberAv3ngers is an Iran-attributed nation-state APT group with an espionage motive.

31TTPs
–No CVE data
5malware
AdvancedProfile →
TEMP.VelesRussia
aka XENOTIME · Triton Actor · ATK 91 +1
Nation-state APTEspionage

TEMP.Veles is a Russia-attributed nation-state APT group with an espionage motive.

29TTPs
1exploited
22malware
AdvancedProfile →
TaidoorChina
Nation-state APTEspionage

Taidoor is a China-attributed nation-state APT group with an espionage motive.

25TTPs
4exploited
3malware
AdvancedProfile →
Dust StormChina
aka G0031 · Operation Dust Storm
Nation-state APTEspionage

Dust Storm is a China-attributed nation-state APT group with an espionage motive.

24TTPs
5exploited
8malware
AdvancedProfile →
StriderUnited States
aka ProjectSauron · G0041
Nation-state APTEspionage

Strider is an United States-attributed nation-state APT group with an espionage motive.

29TTPs
–No CVE data
1malware
AdvancedProfile →
Silent LibrarianIran
aka TA407 · COBALT DICKENS · Mabna Institute +4
Nation-state APTEspionage

Silent Librarian is an Iran-attributed nation-state APT group with an espionage motive.

14TTPs
14exploited
5malware
AdvancedProfile →
Molerats
aka Operation Molerats · Gaza Cybergang
Nation-state APTEspionage

Molerats is a nation-state APT group with an espionage motive.

27TTPs
1exploited
25malware
AdvancedProfile →
NaikonChina
Nation-state APTEspionage

Naikon is a China-attributed nation-state APT group with an espionage motive.

27TTPs
1exploited
38malware
AdvancedProfile →
Putter PandaChina
aka 4HCrew · APT2 · G0024 +6
Nation-state APTEspionage

Putter Panda is a China-attributed nation-state APT group with an espionage motive.

18TTPs
10exploited
23malware
AdvancedProfile →
Admin@338China
aka Temper Panda · Magnesium · Team338 +1
Nation-state APTEspionage

Admin@338 is a China-attributed nation-state APT group with an espionage motive.

25TTPs
3exploited
14malware
AdvancedProfile →
Ajax Security TeamIran
aka Operation Woolen-Goldfish · AjaxTM · Rocket Kitten +4
Nation-state APTEspionage

Ajax Security Team is an Iran-attributed nation-state APT group with an espionage motive.

18TTPs
9exploited
10malware
AdvancedProfile →
IndigoZebraChina
aka G0136
Nation-state APTEspionage

IndigoZebra is a China-attributed nation-state APT group with an espionage motive.

27TTPs
–No CVE data
8malware
AdvancedProfile →
APT30China
aka Override Panda · BRONZE GENEVA · BRONZE STERLING +2
Nation-state APTEspionage

APT30 is a China-attributed nation-state APT group with an espionage motive.

25TTPs
1exploited
31malware
AdvancedProfile →
PittyTigerChina
aka G0011 · PITTY PANDA · Temp.Pittytiger +2
Nation-state APTEspionage

PittyTiger is a China-attributed nation-state APT group with an espionage motive.

19TTPs
5exploited
31malware
AdvancedProfile →
Dark CaracalLebanon
aka ATK 27 · TAG-CT3 · G0070 +1
Nation-state APTEspionage

Dark Caracal is a Lebanon-attributed nation-state APT group with an espionage motive.

24TTPs
–No CVE data
8malware
AdvancedProfile →
LazyScripter
aka G0140
Nation-state APTEspionage

LazyScripter is a nation-state APT group with an espionage motive. It targets 6 sectors, including Government and Technology, in Canada.

23TTPs
1exploited
22malware
AdvancedProfile →
Orangeworm
aka G0071
Nation-state APTEspionage

Orangeworm is a nation-state APT group with an espionage motive.

23TTPs
–No CVE data
8malware
AdvancedProfile →
DustSquadRussia
aka APTC34 · Nomadic Octopus
Nation-state APTEspionage

DustSquad is a Russia-attributed nation-state APT group with an espionage motive.

23TTPs
–No CVE data
2malware
AdvancedProfile →
Equation GroupUnited States
aka APT60 · G0020 · EQGRP +4
Nation-state APTEspionage

Equation Group is an United States-attributed nation-state APT group with an espionage motive.

4TTPs
18exploited
27malware
StrategicProfile →
AxiomChina
aka Group 72 · G0001 · Operation “SMN”
Nation-state APTEspionage

Axiom is a China-attributed nation-state APT group with an espionage motive.

17TTPs
5exploited
21malware
AdvancedProfile →
RancorChina
aka Rancor Group · Rancor Taurus · G0075
Nation-state APTEspionage

Rancor is a China-attributed nation-state APT group with an espionage motive.

19TTPs
3exploited
11malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.