Skip to content
Curated by Brandefense analysts

Know Who Is Coming For You.

2,370 published profiles · 4,640 groups tracked. Each profile shows who the actor is, the sectors it hits, the techniques it uses and the CVEs it exploits, where the source has them.

Groups Tracked On The Platform
4,640
Individuals
123
Campaigns
1,465
Malware Families
33,011
Indicators
2,063,307

144 of 349 published profiles shown · 4,640 groups tracked on the platform, the rest on request

TA419China
UnclassifiedIdeology

TA419 is a China-attributed threat actor group with an ideological motive. It targets 6 sectors, including Government and Technology, in the United States and Japan.

5TTPs
–No CVE data
1malware
AdvancedProfile →
Harvester
UnclassifiedIdeology

Harvester is a threat actor group with an ideological motive. It targets 3 sectors, including Government and Technology, in Afghanistan.

5TTPs
–No CVE data
11malware
AdvancedProfile →
MatxCysec
UnclassifiedIdeology

MatxCysec is a threat actor group with an ideological motive. It targets organisations in 13 countries, including the United Kingdom and India.

5TTPs
–No CVE data
0malware
Not ratedProfile →
NoxShell Cloud Systems • Premium VPS & Shell Satış
UnclassifiedIdeology

NoxShell Cloud Systems • Premium VPS & Shell Satış is a threat actor group with an ideological motive. It targets 4 sectors, including Technology and Finance.

5TTPs
–No CVE data
0malware
IntermediateProfile →
UTA0565China
UnclassifiedIdeology

UTA0565 is a China-attributed threat actor group with an ideological motive.

5TTPs
–No CVE data
1malware
AdvancedProfile →
Iranian-linked hackers
UnclassifiedIdeology

Iranian-linked hackers is a threat actor group with an ideological motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
10malware
AdvancedProfile →
Predatory SparrowIsrael
UnclassifiedIdeology

Predatory Sparrow is an Israel-attributed threat actor group with an ideological motive. It targets organisations in 3 countries, including the United States and Israel.

5TTPs
–No CVE data
4malware
IntermediateProfile →
Gray SandstormIran
aka DEV-0343
UnclassifiedIdeology

Gray Sandstorm is an Iran-attributed threat actor group with an ideological motive. It targets the Defense and Aerospace sector in the United States and Israel.

5TTPs
–No CVE data
3malware
AdvancedProfile →
Shadow Campaigns
UnclassifiedIdeology

Shadow Campaigns is a threat actor group with an ideological motive. It targets organisations in 3 countries, including Australia and Taiwan.

5TTPs
–No CVE data
2malware
AdvancedProfile →
Cavern Manticore
UnclassifiedIdeology

Cavern Manticore is a threat actor group with an ideological motive. It targets 3 sectors, including Government and Technology, in Israel.

5TTPs
–No CVE data
1malware
AdvancedProfile →
CIGAR
aka UNC4895
UnclassifiedIdeology

CIGAR is a threat actor group with an ideological motive. It targets the Defense and Aerospace sector in Ukraine.

3TTPs
2exploited
1malware
AdvancedProfile →
XDSpy cyber espionage cluster
UnclassifiedIdeology

XDSpy cyber espionage cluster is a threat actor group with an ideological motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
5malware
AdvancedProfile →
OP-512China
UnclassifiedIdeology

OP-512 is a China-attributed threat actor group with an ideological motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
1malware
AdvancedProfile →
Nomad Leopard
aka Afghanking777000
UnclassifiedIdeology

Nomad Leopard is a threat actor group with an ideological motive. It targets organisations in Afghanistan. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
2malware
IntermediateProfile →
SHADOW-VOID-042
UnclassifiedIdeology

SHADOW-VOID-042 is a threat actor group with an ideological motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
1malware
AdvancedProfile →
Cyber-espionage Groups
UnclassifiedIdeology

Cyber-espionage Groups is a threat actor group with an ideological motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
1malware
Not ratedProfile →
UTA0533
UnclassifiedIdeology

UTA0533 is a threat actor group with an ideological motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
0malware
AdvancedProfile →
Bytez7
UnclassifiedIdeology

Bytez7 is a threat actor group with an ideological motive.

4TTPs
–No CVE data
0malware
MinimalProfile →
YoroTrooperKazakhstan
aka Silent Lynx
UnclassifiedIdeology

YoroTrooper is a Kazakhstan-attributed threat actor group with an ideological motive.

4TTPs
–No CVE data
8malware
AdvancedProfile →
Chinafans
UnclassifiedIdeology

Chinafans is a threat actor group with an ideological motive. It targets organisations in 15 countries, including India and France. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
MinimalProfile →
Irene
aka XmrAnonye.id
UnclassifiedIdeology

Irene is a threat actor group with an ideological motive.

4TTPs
–No CVE data
0malware
MinimalProfile →
KILLNET
UnclassifiedIdeology

KILLNET is a threat actor group with an ideological motive.

4TTPs
–No CVE data
2malware
IntermediateProfile →
GTG-20006Russia
aka Russia-linked espionage
UnclassifiedIdeology

GTG-20006 is a Russia-attributed threat actor group with an ideological motive. It targets the Hospitality and Tourism sector. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
1malware
AdvancedProfile →
CYBER TEAM INDONESIA
UnclassifiedIdeology

CYBER TEAM INDONESIA is a threat actor group with an ideological motive. It targets 7 sectors, including Government and Manufacturing, in the United States and Indonesia.

4TTPs
–No CVE data
0malware
IntermediateProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.