Skip to content
Curated by Brandefense analysts

Know Who Is Coming For You.

2,370 published profiles · 4,640 groups tracked. Each profile shows who the actor is, the sectors it hits, the techniques it uses and the CVEs it exploits, where the source has them.

Groups Tracked On The Platform
4,640
Individuals
123
Campaigns
1,465
Malware Families
33,002
Indicators
2,062,608

96 of 390 published profiles shown · 4,640 groups tracked on the platform, the rest on request

HuapiChina
UnclassifiedIdeology

Huapi is a China-attributed threat actor group with an ideological motive. It targets organisations in Japan and Taiwan. It uses 14 MITRE ATT&CK techniques.

14TTPs
–No CVE data
2malware
AdvancedProfile →
Earth KurmaChina
UnclassifiedIdeology

Earth Kurma is a China-attributed threat actor group with an ideological motive.

13TTPs
–No CVE data
13malware
AdvancedProfile →
North Korea-linked groups
UnclassifiedIdeology

North Korea-linked groups is a threat actor group with an ideological motive. It uses 13 MITRE ATT&CK techniques.

13TTPs
–No CVE data
2malware
AdvancedProfile →
Russian hackers
UnclassifiedIdeology

Russian hackers is a threat actor group with an ideological motive. It uses 13 MITRE ATT&CK techniques.

13TTPs
–No CVE data
12malware
AdvancedProfile →
Operation CargoTalon
UnclassifiedIdeology

Operation CargoTalon is a threat actor group with an ideological motive. It targets the Defense and Aerospace sector in Russia. It uses 13 MITRE ATT&CK techniques.

13TTPs
–No CVE data
10malware
AdvancedProfile →
hacktivists aligned with Ukrainian interests
UnclassifiedIdeology

hacktivists aligned with Ukrainian interests is a threat actor group with an ideological motive. It uses 13 MITRE ATT&CK techniques.

13TTPs
–No CVE data
10malware
AdvancedProfile →
Warp PandaChina
UnclassifiedIdeology

Warp Panda is a China-attributed threat actor group with an ideological motive. It targets the Manufacturing and Legal sectors. It uses 13 MITRE ATT&CK techniques.

13TTPs
–No CVE data
6malware
ExpertProfile →
UAT-9686
UnclassifiedIdeology

UAT-9686 is a threat actor group with an ideological motive. It uses 11 MITRE ATT&CK techniques and exploits 2 known CVEs.

11TTPs
2exploited
4malware
AdvancedProfile →
Vortex Werewolf
aka SkyCloak
UnclassifiedIdeology

Vortex Werewolf is a threat actor group with an ideological motive. It targets the Government, and Defense and Aerospace sectors in Russia.

13TTPs
–No CVE data
3malware
AdvancedProfile →
KnownSecChina
UnclassifiedIdeology

KnownSec is a China-attributed threat actor group with an ideological motive.

12TTPs
–No CVE data
3malware
ExpertProfile →
Amaranth-Dragon
UnclassifiedIdeology

Amaranth-Dragon is a threat actor group with an ideological motive. It targets the Government sector in 6 countries, including Indonesia and Thailand.

12TTPs
–No CVE data
5malware
AdvancedProfile →
Infrastructure Destruction Squad
aka Dark Engine
UnclassifiedIdeology

Infrastructure Destruction Squad is a threat actor group with an ideological motive. It targets organisations in 4 countries, including Russia and Vietnam.

12TTPs
–No CVE data
3malware
IntermediateProfile →
Intellexa
UnclassifiedIdeology

Intellexa is a threat actor group with an ideological motive. It targets organisations in Vietnam and Pakistan.

10TTPs
2exploited
3malware
AdvancedProfile →
SCTHIndonesia
aka Sadboy Cyber Team Hacktivist · RazherSec1337 · 3 KAGE ID +3
UnclassifiedIdeology

SCTH is an Indonesia-attributed threat actor group with an ideological motive.

10TTPs
1exploited
1malware
IntermediateProfile →
China-nexus hacking groups
UnclassifiedIdeology

China-nexus hacking groups is a threat actor group with an ideological motive. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
1malware
AdvancedProfile →
GhostWriterBelarus
aka Storm-0257 · UNC1151 · FrostyNeighbor +3
UnclassifiedIdeology

GhostWriter is a Belarus-attributed threat actor group with an ideological motive.

10TTPs
–No CVE data
22malware
AdvancedProfile →
Bitter APT
UnclassifiedIdeology

Bitter APT is a threat actor group with an ideological motive. It uses 9 MITRE ATT&CK techniques and exploits 1 known CVE.

9TTPs
1exploited
6malware
AdvancedProfile →
APT16China
aka SVCMONDR · G0023
Nation-state APTIdeology

APT16 is a China-attributed nation-state APT group with an ideological motive.

7TTPs
3exploited
3malware
ExpertProfile →
Paragon Solutions
UnclassifiedIdeology

Paragon Solutions is a threat actor group with an ideological motive. It uses 10 MITRE ATT&CK techniques.

10TTPs
–No CVE data
10malware
ExpertProfile →
UNC1549
aka TA455
UnclassifiedIdeology

UNC1549 is a threat actor group with an ideological motive. It uses 10 MITRE ATT&CK techniques.

10TTPs
–No CVE data
5malware
AdvancedProfile →
Russia-linked hacktivists
UnclassifiedIdeology

Russia-linked hacktivists is a threat actor group with an ideological motive. It uses 10 MITRE ATT&CK techniques.

10TTPs
–No CVE data
6malware
IntermediateProfile →
Forum Troll
UnclassifiedIdeology

Forum Troll is a threat actor group with an ideological motive. It targets organisations in Russia and Belarus.

9TTPs
1exploited
2malware
ExpertProfile →
PDFSIDER
UnclassifiedIdeology

PDFSIDER is a threat actor group with an ideological motive. It uses 10 MITRE ATT&CK techniques.

10TTPs
–No CVE data
4malware
AdvancedProfile →
Cyber Army of Russia Reborn
aka Z-Pentest · CARR · CyberArmyofRussia_Reborn (CARR)
UnclassifiedIdeology

Cyber Army of Russia Reborn is a threat actor group with an ideological motive. It targets the Energy and Utilities sector in the United States.

10TTPs
–No CVE data
1malware
MinimalProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.