Know Who Is Coming For You.
2,370 published profiles · 4,640 groups tracked. Each profile shows who the actor is, the sectors it hits, the techniques it uses and the CVEs it exploits, where the source has them.
- Groups Tracked On The Platform
- 4,640
- Individuals
- 123
- Campaigns
- 1,465
- Malware Families
- 33,028
- Indicators
- 2,067,254
216 of 1,258 published profiles shown · 4,640 groups tracked on the platform, the rest on request
XYZ is a threat actor group with an ideological motive. It targets organisations in 15 countries, including India and France. It uses 4 MITRE ATT&CK techniques.
Three China-linked threat clusters is a China-attributed threat actor group with an ideological motive. It targets the Government sector.
UAT-7810 is a China-attributed threat actor group with an ideological motive. It targets organisations in 5 countries, including the United States and Japan.
V0idix is a threat actor group. It targets organisations in 6 countries, including Italy and Indonesia. It uses 4 MITRE ATT&CK techniques.
Edric is a threat actor group. It targets organisations in the United States and China. It uses 4 MITRE ATT&CK techniques.
Sensitive2025 is a threat actor group. It targets organisations in 3 countries, including France and Brazil. It uses 4 MITRE ATT&CK techniques.
Moelester is a threat actor group. It targets organisations in 7 countries, including France and Russia. It uses 4 MITRE ATT&CK techniques.
Storm-2372 is a threat actor group with an ideological motive. It targets 5 sectors, including Government, and Education and Research. It uses 4 MITRE ATT&CK techniques.
Vandal is a threat actor group. It targets organisations in 3 countries, including Brazil and Poland. It uses 4 MITRE ATT&CK techniques.
Vyntra is a threat actor group. It targets organisations in 4 countries, including the United States and the United Kingdom. It uses 4 MITRE ATT&CK techniques.
Russian intelligence agencies is a Russia-attributed threat actor group with an ideological motive.
Henrymartin is a threat actor group. It targets organisations in 3 countries, including Mexico and Peru. It uses 4 MITRE ATT&CK techniques.
Void Dokkaebi is a threat actor group. It uses 4 MITRE ATT&CK techniques.
SnowSoul is a threat actor group. It targets organisations in China. It uses 4 MITRE ATT&CK techniques.
Water Sigbin is a threat actor group. It targets the Energy and Utilities sector. It uses 1 MITRE ATT&CK technique and exploits 3 known CVEs.
North Korean groups is a threat actor group with an ideological motive. It uses 2 MITRE ATT&CK techniques and exploits 2 known CVEs.
Skull1172 is a threat actor group. It targets organisations in 3 countries, including Spain and Mexico. It uses 4 MITRE ATT&CK techniques.
Nightmare Eclipse is a threat actor group with an ideological motive. It uses 4 MITRE ATT&CK techniques.
DDoSia Project is a threat actor group with an ideological motive. It targets organisations in Spain and the Netherlands. It uses 4 MITRE ATT&CK techniques.
Frenshyny is a threat actor group. It targets organisations in Germany and Australia. It uses 4 MITRE ATT&CK techniques.
053o is a threat actor group. It targets organisations in the United States and Indonesia. It uses 4 MITRE ATT&CK techniques.
Anonymous is a threat actor group with an ideological motive. It uses 4 MITRE ATT&CK techniques.
AI Models is a threat actor group. It uses 4 MITRE ATT&CK techniques.
Black0ut_Exi is a threat actor group. It targets organisations in Mexico and Argentina. It uses 4 MITRE ATT&CK techniques.
IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.
Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.
FAQ
Common Questions.
Each profile includes the actor's origin, type, active date range, target sectors and countries, MITRE ATT&CK TTPs, related CVEs, malware and tools used, recent campaigns, and motivation. Full IOC feeds and YARA rules are available on the Brandefense platform.
Yes. ATLAS Threat Actors DB covers nation-state APT groups such as Lazarus Group, cybercrime syndicates such as Scattered Spider, and ransomware operations. All profiles are maintained by Brandefense analysts.
IOC feeds, YARA rules, and MITRE ATT&CK navigator exports are available through the full Brandefense platform. Request a demo to get access.