Threat Actors

State and criminal groups active against Asia-Pacific · profiles from the MISP galaxy and MITRE ATT&CK · activity measured in the feed
307
Actors
82
ATT&CK profile
14
In the news · 30d
16
Attributed incidents
307 actors
ActorSuspected sponsorAsia-Pacific targets TechniquesIncidentsNews · 30d
Cobalt Group G0080
Cobalt Gang, Cobalt Spider, GOLD KINGSWOOD
— — 34 — —
TA505 G0092 EU high
ATK103, CHIMBORAZO, Dudear, G0092 …
RU Russia AUINJPKRSGTH 34 — —
APT42 G1044 EU medium
CALANQUE, CALANQUE ION, UNC788
IR Iran AU 33 — —
APT33 G0064
APT 33, ATK35, BLEAK ION, COBALT TRINITY …
IR Iran KR 31 — —
GALLIUM G0093
Alloy Taurus, Granite Typhoon, PHANTOM PANDA, Red Dev 4
CN China — 31 — —
RAZOR TIGER G0121
APT-C-17, Rattlesnake, SideWinder, Sidewinder …
IN India CN 30 — —
APT5 G1023
BASALT CASTLE, BRONZE FLEETWOOD, KEYHOLE PANDA, Keyhole Panda …
CN China — 29 — —
Higaisa G0126 EU high KR South Korea CNJPKPSG 28 — —
ToddyCat G1022 EU high
Websiic
— IDINMYTHTWVN 25 — —
DarkHotel G0012 EU medium
APT-C-06, ATK52, DUBNIUM, Darkhotel …
KR South Korea CNJPKRTW 24 — —
APT1 G0006 EU high
Brown Fox, Byzantine Candor, COMMENT PANDA, Comment Crew …
CN China INJPSGTW 23 — —
Inception Framework G0100 EU high
ATK116, Blue Odin, Clean Ursa, Cloud Atlas …
RU Russia INMYVN 22 — —
APT19 G0073
BRONZE FIRESTONE, Black Vine, C0d0so0, Checkered Typhoon …
CN China — 21 — —
LOTUS PANDA G0030 EU medium
ATK1, BRONZE ELGIN, Bilbug, Billbug …
CN China HKIDJPPHTWVN 21 — —
BRONZE STARLIGHT G1021
Cinnamon Tempest, DEV-0401, Emperor Dragonfly, SLIME34
CN China — 19 — —
Confucius G0142
Confucius APT
— — 19 — —
BRONZE HIGHLAND G1034 EU medium
Daggerfly, Evasive Panda
CN China HKINMOMYTW 17 — —
HAZY TIGER G1002 EU medium
APT-C-08, BITTER, Bitter, Orange Yali …
IN India — 16 — —
SideCopy G1008 — — 16 — —
Tonto Team G0131 EU medium
BRONZE HUNTLEY, COPPER, CactusPete, Earth Akhlut …
CN China JPKRTW 15 — —
BlackTech G0098
CAVERN CASTLE, CIRCUIT PANDA, Canary Typhoon, Earth Hundun …
CN China — 14 — —
Naikon G0019 EU medium
BRONZE GENEVA, BRONZE STERLING, Camerashy, G0013 …
CN China CNIDINKHKRLAMMMY+4 14 — —
TA551 G0127
GOLD CABIN, Shathak
— — 14 — —
Transparent Tribe G0134
APT36, COPPER FIELDSTONE, Mythic Leopard, ProjectM
— — 14 — —
APT18 G0026
DYNAMITE PANDA, Dynamite Panda, G0026, PLA Navy …
CN China — 12 — —
Moses Staff G1009
DEV-0500, Marigold Sandstorm
— — 12 — —
TEMPER PANDA G0018 EU medium
Admin338, G0018, MAGNESIUM, Team338 …
CN China HK 12 — —
El Machete G0095 EU high
APT-C-43, G0095, Machete, machete-apt
— CNMY 11 — —
PLATINUM G0068 — — 11 — —
Aoqin Dragon G1007 EU medium
UNC94
CN China AUHKKHSGVN 9 — —
Beijing Group G0066 EU high
Elderwood, Elderwood Gang, G0066, SIG22 …
CN China AUCNHKINTW 9 — —
RANCOR G0075 EU medium
G0075, Rancor, Rancor Group, Rancor Taurus …
CN China KHSG 9 — —
Sowbug G0054 EU medium
G0054
— BNMY 9 — —
Whitefly G0107 — — 9 — —
IndigoZebra G0136 CN China — 7 — —
APT41 G0044 EU high
Amoeba, BARIUM, BRONZE ATLAS, BRONZE EXPORT …
CN China CNHKINJPKRMMSGTH 6 — —
Mofang G0103 EU high
BRONZE WALKER, Superman
CN China INKRMMSG 6 — —
APT12 G0005
BRONZE GLOBE, BeeBus, Calc Team, Crimson Iron …
CN China JPTW 5 — —
APT22 G0039
BRONZE OLIVE, G0039, Group 46, Suckfly
CN China — 5 — —
Cleaver G0003 EU high
APT34, Alibaba, COBALT GYPSY, Cobalt Gypsy …
IR Iran CNINKR 5 — —

Sources: MISP galaxy threat-actor cluster (CC0/BSD) and MITRE ATT&CK® Enterprise, refreshed weekly. Sponsors and victims are those the sources attribute, with their uncertainty. News activity counts Asia-Pacific articles that name the actor or one of its aliases.