Skip to content
Threat actors by type

Nation-state APT Threat Actors.

Brandefense tracks 364 nation-state APT groups. The most documented are APT28, Kimsuky and Lazarus Group. The sectors they target most are Government, Defense and Aerospace, and Manufacturing.

360 of 364 published profiles shown

Swan Vector
Nation-state APTEspionage

Swan Vector is a nation-state APT group with an espionage motive. It targets organisations in Japan and Taiwan.

0TTPs
–No CVE data
1malware
Not ratedProfile →
UAC-0219
Nation-state APTEspionage

UAC-0219 is a nation-state APT group with an espionage motive. It targets the Manufacturing sector.

0TTPs
–No CVE data
2malware
Not ratedProfile →
UAC-0245Russia
Nation-state APTEspionage

UAC-0245 is a Russia-attributed nation-state APT group with an espionage motive. It targets organisations in Ukraine.

0TTPs
–No CVE data
1malware
Not ratedProfile →
BudminerChina
aka Budminer cyberespionage group
Nation-state APTEspionage

Budminer is a China-attributed nation-state APT group with an espionage motive. It targets organisations in Taiwan.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Urpage
Nation-state APTEspionage

Urpage is a nation-state APT group with an espionage motive. It targets organisations in Pakistan.

0TTPs
–No CVE data
1malware
Not ratedProfile →
KasablankaMorocco
Nation-state APTEspionage

Kasablanka is a Morocco-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
LUCKY ELEPHANT
Nation-state APTEspionage

LUCKY ELEPHANT is a nation-state APT group with an espionage motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
Redfly
Nation-state APTEspionage

Redfly is a nation-state APT group with an espionage motive.

0TTPs
–No CVE data
2malware
Not ratedProfile →
ChainedShark
aka Actor240820
Nation-state APTEspionage

ChainedShark is a nation-state APT group with an espionage motive. It targets the Education and Research sector in China.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Eloquent PandaChina
Nation-state APTEspionage

Eloquent Panda is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
REF5961China
Nation-state APTEspionage

REF5961 is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
UNC1088China
aka RAVINE CASTLE
Nation-state APTEspionage

UNC1088 is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
SimaIran
Nation-state APTEspionage

Sima is an Iran-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
TA2552
Nation-state APTEspionage

TA2552 is a nation-state APT group with an espionage motive.

0TTPs
–No CVE data
2malware
Not ratedProfile →
CoughingDown
Nation-state APTEspionage

CoughingDown is a nation-state APT group with an espionage motive.

0TTPs
–No CVE data
2malware
AdvancedProfile →
Vicious Trap
Nation-state APTEspionage

Vicious Trap is a nation-state APT group with an espionage motive.

0TTPs
–No CVE data
1malware
AdvancedProfile →
WLNXSPLINTERChina
Nation-state APTEspionage

WLNXSPLINTER is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
0malware
AdvancedProfile →
ReconHellcat
Nation-state APTEspionage

ReconHellcat is a nation-state APT group with an espionage motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
TEMP.Hermit
Nation-state APTEspionage

TEMP.Hermit is a nation-state APT group with an espionage motive.

0TTPs
–No CVE data
0malware
AdvancedProfile →
Earth Yako
aka Operation RestyLink · Enelink · Operation Enelink
Nation-state APTEspionage

Earth Yako is a nation-state APT group with an espionage motive. It targets organisations in Japan.

0TTPs
–No CVE data
0malware
Not ratedProfile →
Iranian Cyber ArmyIran
aka ICA
Nation-state APTEspionage

Iranian Cyber Army is an Iran-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
0malware
IntermediateProfile →
Wisteria Tsunami
aka DEV-0605 · CyberRoot · MintedSoil
Nation-state APTEspionage

Wisteria Tsunami is a nation-state APT group with an espionage motive. It targets organisations in the United States.

0TTPs
–No CVE data
0malware
Not ratedProfile →
NewsPenguin
Nation-state APTEspionage

NewsPenguin is a nation-state APT group with an espionage motive. It targets organisations in Pakistan.

0TTPs
–No CVE data
0malware
Not ratedProfile →
TetrisPhantom
Nation-state APTEspionage

TetrisPhantom is a nation-state APT group with an espionage motive. It targets the Government sector.

0TTPs
–No CVE data
0malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.