Skip to content

Intel

All threat actors

Every actor the Atlas holds: the groups CyberSIXT tracks, every MITRE ATT&CK group and every actor of the MISP Galaxy, reconciled, with their CVEs, techniques and software. An actor with a CyberSIXT page links to it; the rest open on the Atlas.

1,481 of 1,481 actors

Every threat actor the Atlas holds
Actor · originCVEsTechniquesSoftwareSources
APT28Russia · Pawn Storm, Fancy Bear, Sednit, SNAKEMACKEREL129330CyberSIXT · ATT&CK G0007 · MISP Galaxy
KimsukyNorth Korea · Velvet Chollima, Black Banshee, THALLIUM, Operation Stolen Pencil113119CyberSIXT · ATT&CK G0094 · MISP Galaxy
APT41China · TA415, Blackfly, Grayfly, LEAD118232CyberSIXT · ATT&CK G0096 · MISP Galaxy
APT29Russia · UNC2452, Dark Halo, StellarParticle, NOBELIUM146649CyberSIXT · ATT&CK G0016 · MISP Galaxy
Lazarus GroupNorth Korea · Lazarus, Operation DarkSeoul, Dark Seoul, Hidden Cobra59426CyberSIXT · ATT&CK G0032 · MISP Galaxy
SandwormRussia · IRIDIUM, Seashell Blizzard, Voodoo Bear, BE248628CyberSIXT · ATT&CK G0034 · MISP Galaxy
OilRigIran · CHRYSENE, Greenbug, Hazel Sandstorm, EUROPIUM28230CyberSIXT · ATT&CK G0049 · MISP Galaxy
APT38Origin not attributed · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff, Stardust Chollima–1156ATT&CK G0082
TurlaRussia · Snake, Venomous Bear, Group 88, Waterbug16830CyberSIXT · ATT&CK G0010 · MISP Galaxy
Mustang PandaChina · BRONZE PRESIDENT, HoneyMyte, Red Lich, TEMP.Hex18523CyberSIXT · ATT&CK G0129 · MISP Galaxy
Threat Group-3390China · APT27, Earth Smilodon, TG-3390, Emissary Panda85724ATT&CK G0027 · MISP Galaxy
OceanLotusVietnam · APT32, OceanLotus Group, Cobalt Kitty, APT-C-0027815CyberSIXT · ATT&CK G0050 · MISP Galaxy
Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, UNC3236, Insidious Taurus58117CyberSIXT · ATT&CK G1017 · MISP Galaxy
MuddyWaterIran · TEMP.Zagros, Static Kitten, Seedworm, MERCURY36822CyberSIXT · ATT&CK G0069 · MISP Galaxy
APT35Iran · Newscaster Team, Magic Hound, Phosphorus, Mint Sandstorm97813CyberSIXT · ATT&CK G0059 · MISP Galaxy
menuPassChina · APT10, Stone Panda, Menupass Team, happyyongzi14625ATT&CK G0045 · MISP Galaxy
FIN7Russia · Carbon Spider, GOLD NIAGARA, Calcium, ATK3226719CyberSIXT · ATT&CK G0046 · MISP Galaxy
Wizard SpiderOrigin not attributed · UNC1878, TEMP.MixMaster, Grim Spider, FIN1216422ATT&CK G0102 · MISP Galaxy
Berserk BearRussia · Energetic Bear, ALLANITE, CASTLE, DYMALLOY55810CyberSIXT · ATT&CK G0035 · MISP Galaxy
LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium, BRONZE MOHAWK35017ATT&CK G0065 · MISP Galaxy
GamaredonRussia · Gamaredon Group, ACTINIUM, DEV-0157, Blue Otso1706CyberSIXT · ATT&CK G0047 · MISP Galaxy
FishMongerChina · Earth Lusca, CHROMIUM, ControlX, TAG-221449CyberSIXT · ATT&CK G1006 · MISP Galaxy
Scattered SpiderOrigin not attributed · Scattered Spider/ShinyHunters, UNC3944, Muddled Libra, Oktapus26610CyberSIXT · ATT&CK G1015 · MISP Galaxy
Nimbus ManticoreIran · UNC1549, TA455, COBALT SMOKEY–6513CyberSIXT · ATT&CK G1059 · MISP Galaxy
Graceful SpiderRussia · TA505, SectorJ04, SectorJ04 Group, GOLD TAHOE–3416CyberSIXT · ATT&CK G0092 · MISP Galaxy
BRONZE BUTLERChina · Tick, Nian, REDBALDKNIGHT, STALKER PANDA34014CyberSIXT · ATT&CK G0060 · MISP Galaxy
ChimeraOrigin not attributed–596ATT&CK G0114
Handala HackIran · VOID MANTICORE, COBALT MYSTIQUE, Homeland Justice, Karma163–CyberSIXT · ATT&CK G1055 · MISP Galaxy
Ke3changChina · APT15, Vixen Panda, Playful Dragon, Metushy14611ATT&CK G0004 · MISP Galaxy
APT39Iran · ITG07, Chafer, Remix Kitten, COBALT HICKMAN–5311ATT&CK G0087 · MISP Galaxy
Medusa GroupOrigin not attributed2575ATT&CK G1051
UNC3886China6498CyberSIXT · ATT&CK G1048 · MISP Galaxy
PatchworkIndia · QUILTED TIGER, Chinastrats, MONSOON, Sarit6419CyberSIXT · ATT&CK G0040 · MISP Galaxy
Salt TyphoonChina · GhostEmperor, FamousSparrow, UNC2286, RedMike3581CyberSIXT · ATT&CK G1045 · MISP Galaxy
FIN13Russia · Elephant Beetle, TG20034534ATT&CK G1016 · MISP Galaxy
Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586, Cadet Blizzard24711ATT&CK G1003 · MISP Galaxy
MirrorFaceChina · Earth Kasha–4316ATT&CK G1054 · MISP Galaxy
TeamTNTOrigin not attributed · Adept Libra–564ATT&CK G0139 · MISP Galaxy
Contagious InterviewOrigin not attributed · DeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan, PurpleBravo–544CyberSIXT · ATT&CK G1052 · MISP Galaxy
APT1China · Comment Crew, Comment Group, Comment Panda, PLA Unit 61398–2317ATT&CK G0006 · MISP Galaxy
APT3China · Gothic Panda, Pirpi, UPS Team, Buckeye2446ATT&CK G0022 · MISP Galaxy
APT33Iran · HOLMIUM, Elfin, Peach Sandstorm, MAGNALLIUM33416CyberSIXT · ATT&CK G0064 · MISP Galaxy
BlackByteOrigin not attributed · Hecamede1488ATT&CK G1043
Blind EagleOrigin not attributed · APT-C-36, TAG-144, AguilaCiega, APT-Q-98–389CyberSIXT · ATT&CK G0099 · MISP Galaxy
LyceumIran · COBALT LYCEUM, HEXANE, UNC1530, Spirlin–3612CyberSIXT · ATT&CK G1001 · MISP Galaxy
FIN6Origin not attributed · Magecart Group 6, ITG08, Skeleton Spider, TAAL34012ATT&CK G0037 · MISP Galaxy
Storm-0501Origin not attributed4428CyberSIXT · ATT&CK G1053 · MISP Galaxy
APT37North Korea · Group123, InkySquid, Operation Daybreak, Operation Erebus62913CyberSIXT · ATT&CK G0067 · MISP Galaxy
APT42Iran · UNC788, CALANQUE, CALANQUE ION–332CyberSIXT · ATT&CK G1044 · MISP Galaxy
Cloud AtlasRussia · Inception Framework, Clean Ursa, OXYGEN, ATK1164223CyberSIXT · ATT&CK G0100 · MISP Galaxy

ATT&CK © 2026 The MITRE Corporation, reproduced with its permission. MISP Galaxy under CC0. Every link between an actor and a CVE is a stored, sourced link. Data as of 2026-11-14.

Updated AboutDevelopersSign in