Threat Actor Database
Structured profiles of more than 560 tracked threat actors — nation-state APTs, ransomware operations, and hacktivist groups — each connected to its tools, techniques, incidents, and reporting.
- Akira Ransomware · Unknown
- ALPHV/BlackCat Ransomware · Russia
- Andariel APT · North Korea
- AppleJeus APT · North Korea
- APT1 APT · China
- APT10 APT · China
- APT28 APT · Russia
- APT29 APT · Russia
- APT35 APT · Iran
- APT38 APT · North Korea
- APT40 APT · China
- APT41 APT · China
- Black Basta Ransomware · Russia
- BlackSuit Ransomware · Russia
- Cl0p Ransomware · Russia
- Conti Ransomware · Russia
- Cyber Av3ngers APT · Iran
- DarkSide Ransomware · Russia
- Dragonfly APT · Russia
- Evil Corp Ransomware · Russia
- Famous Chollima APT · North Korea
- FIN11 Ransomware · Suspected Russian-speaking / Commonwealth of Independent States (CIS) region, based on avoidance of targeting CIS-country victims and Russian-language metadata in malware.
- FIN7 Ransomware · Russia
- Gamaredon Group APT · Russia
- GOLD SOUTHFIELD Ransomware · Russia
- HAFNIUM APT · China
- Kimsuky APT · North Korea
- Lazarus Group APT · North Korea
- LockBit Ransomware · Russia
- Medusa Ransomware Ransomware · Unknown
- MuddyWater APT · Iran
- Mustang Panda APT · China
- OilRig APT · Iran
- Play Ransomware Ransomware · Unknown
- RansomHub Ransomware · Unknown
- RomCom APT · Russia
- Salt Typhoon APT · China
- Sandworm Team APT · Russia
- Scattered Spider Ransomware · Unknown
- Storm-0558 APT · China
- TA505 Ransomware · Russia
- The Shadow Brokers Hacktivist · Unknown
- TraderTraitor APT · North Korea
- Turla APT · Russia
- Volt Typhoon APT · China
- Water Galura Ransomware · Unknown
- Winnti Group APT · China
- ZIRCONIUM APT · China
- 0day Syndicate Ransomware · Unknown
- 1937CN APT · China