Threat Actors

State and criminal groups active against Asia-Pacific · profiles from the MISP galaxy and MITRE ATT&CK · activity measured in the feed
307
Actors
82
ATT&CK profile
14
In the news · 30d
16
Attributed incidents
Reset 35 actors
ActorSuspected sponsorAsia-Pacific targets TechniquesIncidentsNews · 30d
Lazarus Group G1036 EU high
APT 38, APT-C-26, APT38, ATK117 …
KP North Korea AUCNHKINJPKRTH 30 1 5
last Nov 9
APT29 G0016 EU high
ATK7, Blue Kitsune, BlueBravo, COZY BEAR …
RU Russia CNINJPKR 66 1 1
last Nov 9
APT17 G0001 EU high
AURORA PANDA, Axiom, BRONZE KEYSTONE, Deputy Dog …
CN China CNIDJP 16 — 1
last Nov 11
APT28 G0007 EU high
APT-C-20, ATK5, Blue Athena, BlueDelta …
RU Russia CNJPMN 93 — —
APT32 G0050 EU high
APT 32, APT-32, APT-C-00, ATK17 …
VN Vietnam CNPHVN 78 — —
Turla G0010 EU high
ATK13, BELUGASTURGEON, Blue Python, G0010 …
RU Russia IN 68 — —
WIZARD SPIDER G0102 EU high
DEV-0193, DEV-0237, FIN12, GOLD BLACKBURN …
RU Russia AUINJPTW 64 — —
APT27 G0027 EU high
BRONZE UNION, Budworm, Circle Typhoon, EMISSARY PANDA …
CN China AUCNINJPKRTHTW 57 — —
ENERGETIC BEAR G0035 EU high
ALLANITE, ATK6, BERSERK BEAR, BROMINE …
RU Russia CNJP 56 — —
APT40 G0065 EU high
ATK29, BRONZE MOHAWK, G0065, GADOLINIUM …
CN China HKKHMYPH 50 — —
APT10 G0045 EU high
ATK41, BRONZE RIVERSIDE, CVNX, Cicada …
CN China AUINJPKRTH 46 — —
APT15 G0004 EU high
BRONZE DAVENPORT, BRONZE IDLEWOOD, BRONZE PALACE, G0004 …
CN China IN 46 — —
Earth Lusca G1006 EU high
AQUATIC PANDA, Aquatic Panda, BRONZE UNIVERSITY, BountyGlad …
CN China AUCNHKJPMNPHTHTW+1 44 — —
TA505 G0092 EU high
ATK103, CHIMBORAZO, Dudear, G0092 …
RU Russia AUINJPKRSGTH 34 — —
Higaisa G0126 EU high KR South Korea CNJPKPSG 28 — —
ToddyCat G1022 EU high
Websiic
— IDINMYTHTWVN 25 — —
APT1 G0006 EU high
Brown Fox, Byzantine Candor, COMMENT PANDA, Comment Crew …
CN China INJPSGTW 23 — —
Inception Framework G0100 EU high
ATK116, Blue Odin, Clean Ursa, Cloud Atlas …
RU Russia INMYVN 22 — —
El Machete G0095 EU high
APT-C-43, G0095, Machete, machete-apt
— CNMY 11 — —
Beijing Group G0066 EU high
Elderwood, Elderwood Gang, G0066, SIG22 …
CN China AUCNHKINTW 9 — —
APT41 G0044 EU high
Amoeba, BARIUM, BRONZE ATLAS, BRONZE EXPORT …
CN China CNHKINJPKRMMSGTH 6 — —
Mofang G0103 EU high
BRONZE WALKER, Superman
CN China INKRMMSG 6 — —
Cleaver G0003 EU high
APT34, Alibaba, COBALT GYPSY, Cobalt Gypsy …
IR Iran CNINKR 5 — —
ProjectSauron G0041 EU high
G0041, Project Sauron, Sauron, Strider
US United States CN 3 — —
APT14 EU high
ALUMINUM, ANCHOR PANDA, QAZTeam
CN China AU — — —
APT21 EU high
HAMMER PANDA, NetTraveler, TEMP.Zhenbao
CN China CNINKRMN — — —
BRONZE SPRING EU high
UNC302
CN China AUJPKR — — —
DAGGER PANDA EU high
IceFog, PLA Unit 69010, Red Foxtrot, Red Wendigo …
CN China CNJPKR — — —
Infy EU high
Foudre, Operation Mermaid, Prince of Persia
IR Iran CN — — —
Operation Parliament EU high — INKR — — —
Sandman APT EU high CN China IN — — —
SNOWGLOBE EU high
ATK8, Animal Farm, Snowglobe
FR France CNMY — — —
Stealth Mango and Tangelo EU high PK Pakistan AUIN — — —
TA406 EU high KP North Korea CNINJPKR — — —
Void Balaur EU high — TW — — —

Sources: MISP galaxy threat-actor cluster (CC0/BSD) and MITRE ATT&CK® Enterprise, refreshed weekly. Sponsors and victims are those the sources attribute, with their uncertainty. News activity counts Asia-Pacific articles that name the actor or one of its aliases.