Threat actors
Every actor CyberSIXT, MITRE ATT&CK and the MISP Galaxy know, reconciled. A row opens the actor's page when CyberSIXT covers it, its Atlas view otherwise.
| Actor | Origin | Motivation | CVEs | In KEV | Techniques | Software | Sources |
|---|---|---|---|---|---|---|---|
| ElderwoodElderwood Gang, Beijing Group, Sneaky Panda, SIG22 | China | Espionage | – | – | 9 | 9 | ATT&CK G0066 · MISP Galaxy |
| Operation ParliamentThis threat actor uses spear-phishing techniques to target parliaments, government ministries, academics, and media organizations, primarily in the Middle East, for the purpose of espionage. Based on our findings, we bel | – | Espionage | – | – | – | – | MISP Galaxy |
| InfyOperation Mermaid, Prince of Persia, Foudre | Iran | Espionage | – | – | – | – | CyberSIXT · MISP Galaxy |
| NoName057(16)05716nnm, Nnm05716, NoName057 | – | Hacktivism | – | – | – | – | CyberSIXT · MISP Galaxy |
| AnonymousAnonymous Sudan | – | Hacktivism | – | – | – | – | CyberSIXT · MISP Galaxy |
ATT&CK © 2026 The MITRE Corporation, reproduced with its permission. MISP Galaxy under CC0. Every link between an actor and a CVE is a stored, sourced link. Data as of 2026-11-15.