Skip to content
Curated by Brandefense analysts

Know Who Is Coming For You.

2,402 published profiles · 4,670 groups tracked. Each profile shows who the actor is, the sectors it hits, the techniques it uses and the CVEs it exploits, where the source has them.

Groups Tracked On The Platform
4,670
Individuals
126
Campaigns
1,842
Malware Families
32,005
Indicators
2,297,660

408 of 2,402 published profiles shown · 4,670 groups tracked on the platform, the rest on request

Scripted Sparrow
CybercrimeFinancial

Scripted Sparrow is a cybercrime syndicate with a financial motive. It uses 12 MITRE ATT&CK techniques.

12TTPs
–No CVE data
3malware
IntermediateProfile →
Orcinus orca
UnclassifiedUnknown

Orcinus orca is a threat actor group. It targets organisations in Vietnam. It uses 12 MITRE ATT&CK techniques.

12TTPs
–No CVE data
0malware
Not ratedProfile →
GordonFreeman
UnclassifiedUnknown

GordonFreeman is a threat actor group. It targets organisations in Ecuador and Venezuela. It uses 12 MITRE ATT&CK techniques.

12TTPs
–No CVE data
0malware
IntermediateProfile →
Hightower6eu
CybercrimeFinancial

Hightower6eu is a cybercrime syndicate with a financial motive. It uses 12 MITRE ATT&CK techniques.

12TTPs
–No CVE data
1malware
IntermediateProfile →
Daixin
aka Daixin Team
RansomwareFinancial

Daixin is a ransomware group with a financial motive.

11TTPs
–No CVE data
4malware
ModerateProfile →
TaskMastersChina
Nation-state APTEspionage

TaskMasters is a China-attributed nation-state APT group with an espionage motive. It targets 6 sectors, including Government and Manufacturing, in Russia.

11TTPs
–No CVE data
25malware
Not ratedProfile →
FakeSecurity
CybercrimeFinancial

FakeSecurity is a cybercrime syndicate with a financial motive. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
2malware
IntermediateProfile →
BlackgearChina
aka Topgear
Nation-state APTEspionage

Blackgear is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 3 countries, including Japan and Taiwan.

11TTPs
–No CVE data
5malware
Not ratedProfile →
Underground
RansomwareFinancial

Underground is a ransomware group with a financial motive.

11TTPs
–No CVE data
2malware
Not ratedProfile →
Vicious PandaChina
Nation-state APTEspionage

Vicious Panda is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in Ukraine. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
1malware
AdvancedProfile →
Aquahack
UnclassifiedUnknown

Aquahack is a threat actor group. It targets organisations in 27 countries, including India and Germany. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
0malware
Not ratedProfile →
Rupert
UnclassifiedUnknown

Rupert is a threat actor group. It targets organisations in 33 countries, including Germany and France. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
0malware
Not ratedProfile →
ChimeraZ
UnclassifiedUnknown

ChimeraZ is a threat actor group. It targets 5 sectors, including Manufacturing, and Transportation and Logistics, in France and Switzerland.

11TTPs
–No CVE data
0malware
Not ratedProfile →
BlackOasis
aka G0063
Nation-state APTEspionage

BlackOasis is a nation-state APT group with an espionage motive.

6TTPs
5exploited
2malware
AdvancedProfile →
PKPLUGChina
Nation-state APTEspionage

PKPLUG is a China-attributed nation-state APT group with an espionage motive. It targets the Civil Society and NGOs sector in 3 countries, including Indonesia and Taiwan.

11TTPs
–No CVE data
7malware
AdvancedProfile →
Gentlemen
CybercrimeFinancial

Gentlemen is a cybercrime syndicate with a financial motive. It targets 4 sectors, including Manufacturing and Finance, in the United States and Thailand.

11TTPs
–No CVE data
13malware
AdvancedProfile →
Libyan ScorpionsLibya
Nation-state APTEspionage

Libyan Scorpions is a Libya-attributed nation-state APT group with an espionage motive. It targets the Government sector in Libya. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
5malware
Not ratedProfile →
Panda
aka ThunderCats · Operation “LagTime IT” · Operation “StealthyTrident”
UnclassifiedUnknown

Panda is a threat actor group. It targets the Government sector in Vietnam. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
1malware
Not ratedProfile →
UNC6692
UnclassifiedUnknown

UNC6692 is a threat actor group. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
6malware
AdvancedProfile →
Cyberban News
UnclassifiedUnknown

Cyberban News is a threat actor group. It targets organisations in 3 countries, including the United States and Australia. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
4malware
Not ratedProfile →
Larva-25012
CybercrimeFinancial

Larva-25012 is a cybercrime syndicate with a financial motive. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
9malware
AdvancedProfile →
WraithTools
CybercrimeFinancial

WraithTools is a cybercrime syndicate with a financial motive. It targets 4 sectors, including Technology and Finance. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
1malware
AdvancedProfile →
Bouncing Golf
CybercrimeEspionage

Bouncing Golf is a cybercrime syndicate with an espionage motive.

11TTPs
–No CVE data
2malware
AdvancedProfile →
UNC5356
aka CryptoChameleon
CybercrimeFinancial

UNC5356 is a cybercrime syndicate with a financial motive. It uses 11 MITRE ATT&CK techniques.

11TTPs
–No CVE data
4malware
IntermediateProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.