Skip to content
Threat actors by type

Nation-state APT Threat Actors.

Brandefense tracks 294 nation-state APT groups. The most documented are Kimsuky, APT28 and Lazarus Group. The sectors they target most are Government, Defense and Aerospace, and Manufacturing.

144 of 346 published profiles shown

UAC-0102
Nation-state APTEspionage

UAC-0102 is a nation-state APT group with an espionage motive. It targets 3 sectors, including Government, and Defense and Aerospace, in Ukraine.

16TTPs
–No CVE data
0malware
AdvancedProfile →
Autumn DragonChina
Nation-state APTIdeology

Autumn Dragon is a China-attributed nation-state APT group with an ideological motive. It targets 6 sectors, including Government, and Education and Research.

16TTPs
–No CVE data
0malware
AdvancedProfile →
Icefog, Dagger PandaChina
aka Icefog · Dagger Panda · ATK 23 +1
Nation-state APTEspionage

Icefog, Dagger Panda is a China-attributed nation-state APT group with an espionage motive.

15TTPs
–No CVE data
6malware
Not ratedProfile →
Flax TyphoonChina
aka Ethereal Panda · RedJuliett
Nation-state APTEspionage

Flax Typhoon is a China-attributed nation-state APT group with an espionage motive.

15TTPs
–No CVE data
14malware
AdvancedProfile →
MoustachedBouncerBelarus
aka G1019
Nation-state APTEspionage

MoustachedBouncer is a Belarus-attributed nation-state APT group with an espionage motive.

14TTPs
1exploited
3malware
AdvancedProfile →
ChessMaster
Nation-state APTEspionage

ChessMaster is a nation-state APT group with an espionage motive. It targets 3 sectors, including Government, and Education and Research, in Japan.

13TTPs
–No CVE data
3malware
IntermediateProfile →
Liminal PandaChina
Nation-state APTEspionage

Liminal Panda is a China-attributed nation-state APT group with an espionage motive. It targets 3 sectors, including Technology, and Defense and Aerospace.

13TTPs
–No CVE data
17malware
AdvancedProfile →
TA459China
aka G0062
Nation-state APTEspionage

TA459 is a China-attributed nation-state APT group with an espionage motive.

11TTPs
2exploited
7malware
ExpertProfile →
UNG0902
Nation-state APTEspionage

UNG0902 is a nation-state APT group with an espionage motive. It targets organisations in Russia. It uses 13 MITRE ATT&CK techniques.

13TTPs
–No CVE data
10malware
AdvancedProfile →
Earth LamiaChina
Nation-state APTEspionage

Earth Lamia is a China-attributed nation-state APT group with an espionage motive.

12TTPs
–No CVE data
10malware
Not ratedProfile →
Syrian Electronic Army (SEA), Deadeye JackalSyria
aka Syrian Electronic Army · Syria Malware Team · Deadeye Jackal +2
Nation-state APTEspionage

Syrian Electronic Army (SEA), Deadeye Jackal is a Syria-attributed nation-state APT group with an espionage motive.

11TTPs
–No CVE data
5malware
Not ratedProfile →
Volatile CedarLebanon
aka DeftTorero · Lebanese Cedar · Amethyst Rain +1
Nation-state APTEspionage

Volatile Cedar is a Lebanon-attributed nation-state APT group with an espionage motive.

8TTPs
3exploited
11malware
AdvancedProfile →
Deep PandaChina
aka Shell Crew · WebMasters · KungFu Kittens +8
Nation-state APTEspionage

Deep Panda is a China-attributed nation-state APT group with an espionage motive.

11TTPs
–No CVE data
15malware
AdvancedProfile →
BlackgearChina
aka Topgear
Nation-state APTEspionage

Blackgear is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 3 countries, including Japan and Taiwan.

11TTPs
–No CVE data
5malware
Not ratedProfile →
APT20China
aka Violin Panda · Crawling Taurus · TH3Bug +1
Nation-state APTEspionage

APT20 is a China-attributed nation-state APT group with an espionage motive.

11TTPs
–No CVE data
3malware
AdvancedProfile →
BlackOasis
aka G0063
Nation-state APTEspionage

BlackOasis is a nation-state APT group with an espionage motive.

6TTPs
5exploited
2malware
AdvancedProfile →
Libyan ScorpionsLibya
Nation-state APTEspionage

Libyan Scorpions is a Libya-attributed nation-state APT group with an espionage motive. It targets the Government sector in Libya. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
5malware
Not ratedProfile →
Desert Falcons
aka FalconsAPT
Nation-state APTEspionage

Desert Falcons is a nation-state APT group with an espionage motive.

10TTPs
–No CVE data
4malware
IntermediateProfile →
TeamSpy CrewRussia
aka SIG39 · Iron Lyric · Team Bear +1
Nation-state APTEspionage

TeamSpy Crew is a Russia-attributed nation-state APT group with an espionage motive.

10TTPs
–No CVE data
6malware
Not ratedProfile →
CopyKittensIran
aka Slayer Kitten · G0052 · Operation “Wilted Tulip”
Nation-state APTEspionage

CopyKittens is an Iran-attributed nation-state APT group with an espionage motive.

9TTPs
1exploited
16malware
AdvancedProfile →
APT16China
aka SVCMONDR · G0023
Nation-state APTIdeology

APT16 is a China-attributed nation-state APT group with an ideological motive.

7TTPs
3exploited
3malware
ExpertProfile →
Sphinx
aka APT-C-15
Nation-state APTEspionage

Sphinx is a nation-state APT group with an espionage motive. It targets the Government, and Defense and Aerospace sectors in Israel and Egypt.

10TTPs
–No CVE data
4malware
Not ratedProfile →
Earth BaxiaChina
Nation-state APTEspionage

Earth Baxia is a China-attributed nation-state APT group with an espionage motive.

9TTPs
1exploited
2malware
AdvancedProfile →
STTEAM
Nation-state APTEspionage

STTEAM is a nation-state APT group with an espionage motive. It targets the Government, and Energy and Utilities sectors. It uses 10 MITRE ATT&CK techniques.

10TTPs
–No CVE data
2malware
IntermediateProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.