Skip to content
Threat actors by type

Nation-state APT Threat Actors.

Brandefense tracks 364 nation-state APT groups. The most documented are APT28, Kimsuky and Lazarus Group. The sectors they target most are Government, Defense and Aerospace, and Manufacturing.

192 of 364 published profiles shown

WildNeutron
aka Butterfly · Morpho · Sphinx Moth +1
Nation-state APTEspionage

WildNeutron is a nation-state APT group with an espionage motive.

8TTPs
–No CVE data
5malware
Not ratedProfile →
Blue Termite, Cloudy OmegaChina
aka Blue Termite · Cloudy Omega
Nation-state APTEspionage

Blue Termite, Cloudy Omega is a China-attributed nation-state APT group with an espionage motive. It targets 13 sectors, including Government and Manufacturing, in Japan.

8TTPs
–No CVE data
1malware
Not ratedProfile →
UAT-11587China
Nation-state APTEspionage

UAT-11587 is a China-attributed nation-state APT group with an espionage motive.

8TTPs
–No CVE data
1malware
AdvancedProfile →
WildCard
Nation-state APTEspionage

WildCard is a nation-state APT group with an espionage motive. It targets 3 sectors, including Manufacturing, and Education and Research, in Israel.

8TTPs
–No CVE data
3malware
Not ratedProfile →
Sunshop Digital Quartermaster
aka SDQ
Nation-state APTEspionage

Sunshop Digital Quartermaster is a nation-state APT group with an espionage motive. It targets 6 sectors, including Government and Finance.

7TTPs
–No CVE data
0malware
AdvancedProfile →
Earth WendigoChina
Nation-state APTEspionage

Earth Wendigo is a China-attributed nation-state APT group with an espionage motive.

7TTPs
–No CVE data
4malware
Not ratedProfile →
RedEchoChina
aka G1042
Nation-state APTEspionage

RedEcho is a China-attributed nation-state APT group with an espionage motive.

5TTPs
2exploited
2malware
IntermediateProfile →
IridiumIran
Nation-state APTEspionage

Iridium is an Iran-attributed nation-state APT group with an espionage motive. It targets 5 sectors, including Government and Technology.

7TTPs
–No CVE data
5malware
Not ratedProfile →
UNK_QuietRacket
Nation-state APTEspionage

UNK_QuietRacket is a nation-state APT group with an espionage motive. It targets 3 sectors, including Government and Finance, in Indonesia and Singapore.

4TTPs
3exploited
2malware
Not ratedProfile →
NightEagleUnited States
aka APT-Q-95
Nation-state APTEspionage

NightEagle is an United States-attributed nation-state APT group with an espionage motive. It targets 3 sectors, including Government and Technology, in China.

7TTPs
–No CVE data
2malware
ExpertProfile →
China Panda
Nation-state APTEspionage

China Panda is a nation-state APT group with an espionage motive. It targets the Government sector in Vietnam. It uses 7 MITRE ATT&CK techniques.

7TTPs
–No CVE data
1malware
AdvancedProfile →
ARMORY CASTLEChina
Nation-state APTEspionage

ARMORY CASTLE is a China-attributed nation-state APT group with an espionage motive. It targets the Technology, and Education and Research sectors.

7TTPs
–No CVE data
3malware
AdvancedProfile →
UTA0560
Nation-state APTEspionage

UTA0560 is a nation-state APT group with an espionage motive. It targets the Government sector in the United States.

4TTPs
3exploited
2malware
Not ratedProfile →
Luckycat
Nation-state APTEspionage

Luckycat is a nation-state APT group with an espionage motive. It targets the Civil Society and NGOs sector. It uses 7 MITRE ATT&CK techniques.

7TTPs
–No CVE data
1malware
AdvancedProfile →
Sohaib Akhter
Nation-state APTEspionage

Sohaib Akhter is a nation-state APT group with an espionage motive. It targets the Government sector. It uses 7 MITRE ATT&CK techniques.

7TTPs
–No CVE data
0malware
AdvancedProfile →
Windigo
Nation-state APTEspionage

Windigo is a nation-state APT group with an espionage motive. It uses 7 MITRE ATT&CK techniques.

7TTPs
–No CVE data
1malware
AdvancedProfile →
Muneeb Akhter
Nation-state APTEspionage

Muneeb Akhter is a nation-state APT group with an espionage motive. It uses 7 MITRE ATT&CK techniques.

7TTPs
–No CVE data
0malware
AdvancedProfile →
RATicate
Nation-state APTEspionage

RATicate is a nation-state APT group with an espionage motive.

6TTPs
–No CVE data
10malware
Not ratedProfile →
Earth KrahangChina
Nation-state APTEspionage

Earth Krahang is a China-attributed nation-state APT group with an espionage motive.

4TTPs
2exploited
9malware
AdvancedProfile →
Roaming TigerChina
aka Rotten Tomato · CTG-7273 · Bronze Woodland
Nation-state APTEspionage

Roaming Tiger is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 7 countries, including Russia and Ukraine.

6TTPs
–No CVE data
4malware
Not ratedProfile →
OnionDogNorth Korea
Nation-state APTEspionage

OnionDog is a North Korea-attributed nation-state APT group with an espionage motive. It targets 4 sectors, including Government and Manufacturing, in South Korea.

5TTPs
–No CVE data
0malware
Not ratedProfile →
Ezekiel Dean PotterUnited States
Nation-state APTEspionage

Ezekiel Dean Potter is an United States-attributed nation-state APT group with an espionage motive. It targets organisations in the United States.

5TTPs
–No CVE data
5malware
IntermediateProfile →
UTA0576
Nation-state APTEspionage

UTA0576 is a nation-state APT group with an espionage motive. It targets the Government and Manufacturing sectors in the United States. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
0malware
AdvancedProfile →
Miasma
Nation-state APTEspionage

Miasma is a nation-state APT group with an espionage motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
6malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.