Threat actors
Every actor CyberSIXT, MITRE ATT&CK and the MISP Galaxy know, reconciled. A row opens the actor's page when CyberSIXT covers it, its Atlas view otherwise.
| Actor | Origin | Motivation | CVEs | In KEV | Techniques | Software | Sources |
|---|---|---|---|---|---|---|---|
| PatchworkQUILTED TIGER, Chinastrats, MONSOON, Sarit | India | Espionage | 6 | 6 | 41 | 9 | CyberSIXT · ATT&CK G0040 · MISP Galaxy |
| SideWinderRAZOR TIGER, Rattlesnake, APT-C-17, T-APT-04 | India | – | 2 | 2 | 30 | 1 | CyberSIXT · ATT&CK G0121 · MISP Galaxy |
| BitterHAZY TIGER, T-APT-17, APT-C-08, Orange Yali | India | – | 5 | 5 | 17 | 1 | CyberSIXT · ATT&CK G1002 · MISP Galaxy |
| APT-C-35VICEROY TIGER, OPERATION HANGOVER, Donot Team, SectorE02 | India | – | – | – | – | – | CyberSIXT · MISP Galaxy |
| ConfuciousConfucius is an APT organization funded by India. It has been carrying out cyber attacks since 2013. Its main targets are India's neighbouring countries such as Pakistan and China. It has a strong interest in targets in | India | – | – | – | – | – | MISP Galaxy |
ATT&CK © 2026 The MITRE Corporation, reproduced with its permission. MISP Galaxy under CC0. Every link between an actor and a CVE is a stored, sourced link. Data as of 2026-11-15.