Threat Actors

State and criminal groups active against Asia-Pacific · profiles from the MISP galaxy and MITRE ATT&CK · activity measured in the feed
307
Actors
82
ATT&CK profile
14
In the news · 30d
16
Attributed incidents
Reset 26 actors
ActorSuspected sponsorAsia-Pacific targets TechniquesIncidentsNews · 30d
Lazarus Group G1036 EU high
APT 38, APT-C-26, APT38, ATK117 …
KP North Korea AUCNHKINJPKRTH 30 1 5
last Nov 9
APT29 G0016 EU high
ATK7, Blue Kitsune, BlueBravo, COZY BEAR …
RU Russia CNINJPKR 66 1 1
last Nov 9
APT37 G0067 EU medium
APT 37, APT-C-28, ATK4, G0067 …
KP North Korea JPKRVN 29 2 —
APT27 G0027 EU high
BRONZE UNION, Budworm, Circle Typhoon, EMISSARY PANDA …
CN China AUCNINJPKRTHTW 57 — —
APT10 G0045 EU high
ATK41, BRONZE RIVERSIDE, CVNX, Cicada …
CN China AUINJPKRTH 46 — —
Tick G0060 EU medium
BRONZE BUTLER, G0060, Nian, PLA Unit 61419 …
CN China CNJPKR 40 — —
TA505 G0092 EU high
ATK103, CHIMBORAZO, Dudear, G0092 …
RU Russia AUINJPKRSGTH 34 — —
APT33 G0064
APT 33, ATK35, BLEAK ION, COBALT TRINITY …
IR Iran KR 31 — —
DarkHotel G0012 EU medium
APT-C-06, ATK52, DUBNIUM, Darkhotel …
KR South Korea CNJPKRTW 24 — —
Tonto Team G0131 EU medium
BRONZE HUNTLEY, COPPER, CactusPete, Earth Akhlut …
CN China JPKRTW 15 — —
Naikon G0019 EU medium
BRONZE GENEVA, BRONZE STERLING, Camerashy, G0013 …
CN China CNIDINKHKRLAMMMY+4 14 — —
APT41 G0044 EU high
Amoeba, BARIUM, BRONZE ATLAS, BRONZE EXPORT …
CN China CNHKINJPKRMMSGTH 6 — —
Mofang G0103 EU high
BRONZE WALKER, Superman
CN China INKRMMSG 6 — —
Cleaver G0003 EU high
APT34, Alibaba, COBALT GYPSY, Cobalt Gypsy …
IR Iran CNINKR 5 — —
APT30 G0013 EU medium
G0013, ISTHMUS CASTLE
CN China INKRMYTHVN 2 — —
APT21 EU high
HAMMER PANDA, NetTraveler, TEMP.Zhenbao
CN China CNINKRMN — — —
BRONZE SPRING EU high
UNC302
CN China AUJPKR — — —
DAGGER PANDA EU high
IceFog, PLA Unit 69010, Red Foxtrot, Red Wendigo …
CN China CNJPKR — — —
Gelsemium EU medium
狼毒草
— CNJPKPKRMN — — —
GOBLIN PANDA EU medium
Conimes, Cycldek
CN China IDINJPKRMYPHVN — — —
OnionDog KP North Korea KR — — —
Operation Parliament EU high — INKR — — —
TA406 EU high KP North Korea CNINJPKR — — —
TempTick CN China JPKR — — —
White Bear
Skipper Turla
RU Russia KR — — —
Yanbian Gang — JPKR — — —

Sources: MISP galaxy threat-actor cluster (CC0/BSD) and MITRE ATT&CK® Enterprise, refreshed weekly. Sponsors and victims are those the sources attribute, with their uncertainty. News activity counts Asia-Pacific articles that name the actor or one of its aliases.