Atomic Fusion Taxonomy — Threat Actor Naming
IntelFusions assigns every tracked threat actor a two-word Atomic Fusion name in which the noun encodes the actor category — so the name itself tells you what kind of threat you are looking at. Vendor and community aliases are preserved on every profile, and each profile links the actor to its techniques, tools, and incidents.
Categories
- Isotope — Russia-nexus APT. State-aligned espionage and sabotage operations attributed to Russian intelligence services and their contractors.
- Neutron — China-nexus APT. Espionage-focused intrusion sets attributed to Chinese state-sponsored programs, targeting government, telecom, and industry.
- Fission — DPRK-nexus APT. North Korean operations blending espionage with revenue generation — cryptocurrency theft, supply-chain compromise, and IT-worker fraud.
- Ion — Iran-nexus APT. Iranian state-aligned groups conducting espionage, destructive attacks, and hack-and-leak influence operations.
- Quark — Pakistan-nexus APT. Pakistan-aligned espionage groups, typically targeting South Asian government and defense entities.
- Photon — India-nexus APT. India-aligned intrusion sets focused on regional espionage across South Asia.
- Particle — Other APT. State-aligned or advanced groups whose origin falls outside the named programs above.
- Flux — Ransomware. Financially motivated ransomware and extortion operations, from RaaS brands to data-theft-only crews.
- Pulse — Hacktivist. Ideologically motivated groups conducting DDoS, defacement, and hack-and-leak campaigns.