Threat actors
Every actor CyberSIXT, MITRE ATT&CK and the MISP Galaxy know, reconciled. A row opens the actor's page when CyberSIXT covers it, its Atlas view otherwise.
| Actor | Origin | Motivation | CVEs | In KEV | Techniques | Software | Sources |
|---|---|---|---|---|---|---|---|
| Equation GroupTilded Team, EQGRP, Equation | United States | Espionage | – | – | 4 | – | CyberSIXT · ATT&CK G0020 · MISP Galaxy |
| StriderProjectSauron, Sauron | United States | Espionage | – | – | 3 | 1 | ATT&CK G0041 · MISP Galaxy |
| LonghornLamberts, the Lamberts, APT-C-39, PLATINUM TERMINAL | United States | Espionage | – | – | – | – | MISP Galaxy |
| NightEagleAPT-Q-95 | United States | Espionage | 2 | 2 | – | – | CyberSIXT · MISP Galaxy |
| PIZZO SPIDERDD4BC, Ambiorx | United States | – | – | – | – | – | MISP Galaxy |
| Storm-2657Payroll Pirates | United States | Financial | – | – | – | – | CyberSIXT · MISP Galaxy |
ATT&CK © 2026 The MITRE Corporation, reproduced with its permission. MISP Galaxy under CC0. Every link between an actor and a CVE is a stored, sourced link. Data as of 2026-11-15.