Skip to content
Curated by Brandefense analysts

Know Who Is Coming For You.

2,370 published profiles · 4,640 groups tracked. Each profile shows who the actor is, the sectors it hits, the techniques it uses and the CVEs it exploits, where the source has them.

Groups Tracked On The Platform
4,640
Individuals
123
Campaigns
1,465
Malware Families
33,028
Indicators
2,067,254

216 of 1,258 published profiles shown · 4,640 groups tracked on the platform, the rest on request

XYZ
UnclassifiedIdeology

XYZ is a threat actor group with an ideological motive. It targets organisations in 15 countries, including India and France. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
MinimalProfile →
Three China-linked threat clustersChina
UnclassifiedIdeology

Three China-linked threat clusters is a China-attributed threat actor group with an ideological motive. It targets the Government sector.

4TTPs
–No CVE data
8malware
AdvancedProfile →
UAT-7810China
UnclassifiedIdeology

UAT-7810 is a China-attributed threat actor group with an ideological motive. It targets organisations in 5 countries, including the United States and Japan.

4TTPs
–No CVE data
3malware
AdvancedProfile →
V0idix
UnclassifiedUnknown

V0idix is a threat actor group. It targets organisations in 6 countries, including Italy and Indonesia. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Edric
UnclassifiedUnknown

Edric is a threat actor group. It targets organisations in the United States and China. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Sensitive2025
UnclassifiedUnknown

Sensitive2025 is a threat actor group. It targets organisations in 3 countries, including France and Brazil. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Moelester
UnclassifiedUnknown

Moelester is a threat actor group. It targets organisations in 7 countries, including France and Russia. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Storm-2372
UnclassifiedIdeology

Storm-2372 is a threat actor group with an ideological motive. It targets 5 sectors, including Government, and Education and Research. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
1malware
AdvancedProfile →
Vandal
UnclassifiedUnknown

Vandal is a threat actor group. It targets organisations in 3 countries, including Brazil and Poland. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Vyntra
UnclassifiedUnknown

Vyntra is a threat actor group. It targets organisations in 4 countries, including the United States and the United Kingdom. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Russian intelligence agenciesRussia
aka Moscow's agents · Russian agents
UnclassifiedIdeology

Russian intelligence agencies is a Russia-attributed threat actor group with an ideological motive.

4TTPs
–No CVE data
0malware
AdvancedProfile →
Henrymartin
UnclassifiedUnknown

Henrymartin is a threat actor group. It targets organisations in 3 countries, including Mexico and Peru. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Void Dokkaebi
UnclassifiedUnknown

Void Dokkaebi is a threat actor group. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
4malware
IntermediateProfile →
SnowSoul
UnclassifiedUnknown

SnowSoul is a threat actor group. It targets organisations in China. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
1malware
Not ratedProfile →
Water Sigbin
aka 8220 Gang
UnclassifiedUnknown

Water Sigbin is a threat actor group. It targets the Energy and Utilities sector. It uses 1 MITRE ATT&CK technique and exploits 3 known CVEs.

1TTPs
3exploited
2malware
Not ratedProfile →
North Korean groups
UnclassifiedIdeology

North Korean groups is a threat actor group with an ideological motive. It uses 2 MITRE ATT&CK techniques and exploits 2 known CVEs.

2TTPs
2exploited
2malware
AdvancedProfile →
Skull1172
UnclassifiedUnknown

Skull1172 is a threat actor group. It targets organisations in 3 countries, including Spain and Mexico. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Nightmare Eclipse
UnclassifiedIdeology

Nightmare Eclipse is a threat actor group with an ideological motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
1malware
IntermediateProfile →
DDoSia Project
UnclassifiedIdeology

DDoSia Project is a threat actor group with an ideological motive. It targets organisations in Spain and the Netherlands. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
IntermediateProfile →
Frenshyny
UnclassifiedUnknown

Frenshyny is a threat actor group. It targets organisations in Germany and Australia. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
053o
UnclassifiedUnknown

053o is a threat actor group. It targets organisations in the United States and Indonesia. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
Anonymous
aka Anonymous Arabia
UnclassifiedIdeology

Anonymous is a threat actor group with an ideological motive. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
IntermediateProfile →
AI Models
aka Claude Sonnet 4.5
UnclassifiedUnknown

AI Models is a threat actor group. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
2malware
ExpertProfile →
Black0ut_Exi
UnclassifiedUnknown

Black0ut_Exi is a threat actor group. It targets organisations in Mexico and Argentina. It uses 4 MITRE ATT&CK techniques.

4TTPs
–No CVE data
0malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.