Threat Actors

State and criminal groups active against Asia-Pacific · profiles from the MISP galaxy and MITRE ATT&CK · activity measured in the feed
307
Actors
82
ATT&CK profile
14
In the news · 30d
16
Attributed incidents
Reset 26 actors
ActorSuspected sponsorAsia-Pacific targets TechniquesIncidentsNews · 30d
TraderTraitor
Jade Sleet, Pukchong, UNC4899
KP North Korea — — 2 29
last Nov 11
Lazarus Group G1036 EU high
APT 38, APT-C-26, APT38, ATK117 …
KP North Korea AUCNHKINJPKRTH 30 1 5
last Nov 9
WageMole G1052
Contagious Interview, DEV#POPPER, DeceptiveDevelopment, Famous Chollima …
KP North Korea — 54 1 1
last Nov 9
Kimsuky G0094 EU medium
APT43, Black Banshee, Earth Kumiho, Emerald Sleet …
KP North Korea — 130 — 1
last Oct 29
Pearl Sleet
DEV-0215, LAWRENCIUM
KP North Korea — — — 1
last Oct 29
APT37 G0067 EU medium
APT 37, APT-C-28, ATK4, G0067 …
KP North Korea JPKRVN 29 2 —
APT45
GRASS NEPTUNE
KP North Korea — — — —
ELUSIVE COMET KP North Korea — — — —
JINX-0164 KP North Korea — — — —
Larva-24005 KP North Korea — — — —
Nickel Alley KP North Korea — — — —
OnionDog KP North Korea KR — — —
Opal Sleet
Konni, OSMIUM, Vedalia
KP North Korea — — — —
puNK-003 KP North Korea — — — —
Ruby Sleet
CERIUM
KP North Korea — — — —
Silent Chollima
Andariel, GOP, Guardian of Peace, Onyx Sleet …
KP North Korea — — — —
Storm-0530
DEV-0530, H0lyGh0st
KP North Korea — — — —
TA406 EU high KP North Korea CNINJPKR — — —
TA444 KP North Korea — — — —
TEMP.Hermit
HERMIT NEPTUNE
KP North Korea — — — —
UAT-5394 KP North Korea — — — —
UNC1069
CryptoCore, MASAN, MIDNIGHT NEPTUNE
KP North Korea — — — —
UNC2970 KP North Korea — — — —
UNC4736 KP North Korea — — — —
UNC5342 KP North Korea — — — —
Wassonite KP North Korea — — — —

Sources: MISP galaxy threat-actor cluster (CC0/BSD) and MITRE ATT&CK® Enterprise, refreshed weekly. Sponsors and victims are those the sources attribute, with their uncertainty. News activity counts Asia-Pacific articles that name the actor or one of its aliases.