/ INTELLIGENCE / ACTORS
Threat Actor Intelligence
10 tracked groups • cisa.one ATR-DB v4.2
AP
APT29
aka Cozy Bear, Midnight Blizzard
OriginRussia
MotiveEspionage
IndustriesGovernment, Defense, Healthcare
Last seen2h ago
CVEs in arsenal
47
T1T2T3T4+43
La
Lazarus Group
aka HIDDEN COBRA
OriginDPRK
MotiveFinancial / Espionage
IndustriesFinance, Crypto, Defense
Last seen5h ago
CVEs in arsenal
63
T1T2T3T4+59
FI
FIN7
aka Carbanak
OriginEastern Europe
MotiveFinancial
IndustriesRetail, Hospitality, Finance
Last seen1d ago
CVEs in arsenal
28
T1T2T3T4+24
Cl
Cl0p
aka TA505
OriginRussia
MotiveRansomware
IndustriesAll sectors
Last seen3h ago
CVEs in arsenal
19
T1T2T3T4+15
Lo
LockBit
aka Bitwise Spider
OriginRussia
MotiveRansomware
IndustriesManufacturing, Healthcare, Education
Last seen1h ago
CVEs in arsenal
41
T1T2T3T4+37
Bl
BlackCat
aka ALPHV
OriginRussia
MotiveRansomware
IndustriesEnergy, Healthcare
Last seen6h ago
CVEs in arsenal
22
T1T2T3T4+18
Vo
Volt Typhoon
aka BRONZE SILHOUETTE
OriginChina
MotiveEspionage / Pre-positioning
IndustriesCritical Infrastructure, Telecom
Last seen12h ago
CVEs in arsenal
35
T1T2T3T4+31
Sa
Sandworm
aka BlackEnergy
OriginRussia (GRU)
MotiveDestructive / Espionage
IndustriesEnergy, Government
Last seen8h ago
CVEs in arsenal
51
T1T2T3T4+47
Sc
Scattered Spider
aka UNC3944
OriginUSA/UK
MotiveFinancial / Extortion
IndustriesTech, Telecom, Hospitality
Last seen30m ago
CVEs in arsenal
17
T1T2T3T4+13
Ki
Kimsuky
aka Velvet Chollima
OriginDPRK
MotiveEspionage
IndustriesThink Tanks, Government
Last seen4h ago
CVEs in arsenal
24
T1T2T3T4+20
MITRE ATT&CK Coverage
Aggregate TTPs across tracked actors
High coverage Medium Low None