Forensia CTI Core

Adversary groups

MITRE intrusion-sets, most-instrumented first.

ID	Actor	Also known as	Techniques	Software
G0094	Kimsuky	Kimsuky, Black Banshee, Velvet Chollima	130	19
G0007	APT28	APT28, IRON TWILIGHT, SNAKEMACKEREL	93	29
G0032	Lazarus Group	Lazarus Group, Labyrinth Chollima, HIDDEN COBRA	93	26
G0129	Mustang Panda	Mustang Panda, TA416, RedDelta	85	23
G0096	APT41	APT41, Wicked Panda, Brass Typhoon	82	32
G1017	Volt Typhoon	Volt Typhoon, BRONZE SILHOUETTE, Vanguard Panda	81	17
G0034	Sandworm Team	Sandworm Team, ELECTRUM, Telebots	79	27
G0050	APT32	APT32, SeaLotus, OceanLotus	78	15
G0059	Magic Hound	Magic Hound, TA453, COBALT ILLUSION	78	13
G0049	OilRig	OilRig, COBALT GYPSY, IRN2	76	30
G0047	Gamaredon Group	Gamaredon Group, IRON TILDEN, Primitive Bear	70	6
G0069	MuddyWater	MuddyWater, Earth Vetala, MERCURY	68	21
G0010	Turla	Turla, IRON HUNTER, Group 88	68	30
G0046	FIN7	FIN7, GOLD NIAGARA, ITG14	67	19
G0016	APT29	APT29, IRON RITUAL, IRON HEMLOCK	66	49
G1015	Scattered Spider	Scattered Spider, Roasted 0ktapus, Octo Tempest	64	9
G0102	Wizard Spider	Wizard Spider, UNC1878, TEMP.MixMaster	64	22
G1055	VOID MANTICORE	VOID MANTICORE, COBALT MYSTIQUE, Handala Hack	63	0
G0114	Chimera	Chimera	59	6
G1051	Medusa Group	Medusa Group	57	5
G0027	Threat Group-3390	Threat Group-3390, Earth Smilodon, TG-3390	57	24
G0082	APT38	APT38, NICKEL GLADSTONE, BeagleBoyz	56	6
G0035	Dragonfly	Dragonfly, TEMP.Isotope, DYMALLOY	56	10
G0139	TeamTNT	TeamTNT	56	4
G1052	Contagious Interview	Contagious Interview, DeceptiveDevelopment, Gwisin Gang	54	4
G0087	APT39	APT39, ITG07, Chafer	53	11
G1016	FIN13	FIN13, Elephant Beetle	53	4
G0065	Leviathan	Leviathan, MUDCARP, Kryptonite Panda	50	17
G1048	UNC3886	UNC3886	49	8
G1043	BlackByte	BlackByte, Hecamede	48	8
G1003	Ember Bear	Ember Bear, UNC2589, Bleeding Bear	47	11
G0004	Ke3chang	Ke3chang, APT15, Mirage	46	11
G0045	menuPass	menuPass, Cicada, POTASSIUM	46	25
G0022	APT3	APT3, Gothic Panda, Pirpi	44	6
G1006	Earth Lusca	Earth Lusca, TAG-22, Charcoal Typhoon	44	9
G0125	HAFNIUM	HAFNIUM, Operation Exchange Marauder, Silk Typhoon	44	6
G1004	LAPSUS$	LAPSUS$, DEV-0537, Strawberry Tempest	43	1
G1054	MirrorFace	MirrorFace, Earth Kasha	43	16
G1053	Storm-0501	Storm-0501	42	8
G0117	Fox Kitten	Fox Kitten, UNC757, Parisite	41	5
G0040	Patchwork	Patchwork, Hangover Group, Dropping Elephant	41	8
G1039	RedCurl	RedCurl	41	0
G0060	BRONZE BUTLER	BRONZE BUTLER, REDBALDKNIGHT, Tick	40	14
G0037	FIN6	FIN6, Magecart Group 6, ITG08	40	12
G0081	Tropic Trooper	Tropic Trooper, Pirate Panda, KeyBoy	40	6
G0099	APT-C-36	APT-C-36, Blind Eagle, TAG-144	38	9
G0061	FIN8	FIN8, Syssphinx	36	11
G1001	HEXANE	HEXANE, Lyceum, Siamesekitten	36	12
G0106	Rocke	Rocke	36	0
G0143	Aquatic Panda	Aquatic Panda	35	6
G0080	Cobalt Group	Cobalt Group, GOLD KINGSWOOD, Cobalt Gang	34	6
G0092	TA505	TA505, Hive0065, Spandex Tempest	34	16
G0119	Indrik Spider	Indrik Spider, Evil Corp, Manatee Tempest	33	8
G1044	APT42	APT42	32	2
G0064	APT33	APT33, HOLMIUM, Elfin	31	16
G0093	GALLIUM	GALLIUM, Granite Typhoon	31	16
G1046	Storm-1811	Storm-1811	31	7
G1036	Moonstone Sleet	Moonstone Sleet, Storm-1789	30	1
G0121	Sidewinder	Sidewinder, T-APT-04, Rattlesnake	30	1
G0067	APT37	APT37, InkySquid, ScarCruft	29	13
G1023	APT5	APT5, Mulberry Typhoon, MANGANESE	29	13
G0128	ZIRCONIUM	ZIRCONIUM, APT31, Violet Typhoon	29	0
G0126	Higaisa	Higaisa	28	3
G1014	LuminousMoth	LuminousMoth	28	2
G0091	Silence	Silence, Whisper Spider	28	3
G1018	TA2541	TA2541	28	9
G1041	Sea Turtle	Sea Turtle, Teal Kurma, Marbled Dust	27	1
G1035	Winter Vivern	Winter Vivern, TA473, UAC-0114	27	0
G1040	Play	Play	26	9
G0090	WIRTE	WIRTE, Ashen Lepus	26	8
G1032	INC Ransom	INC Ransom, GOLD IONIC	25	8
G1022	ToddyCat	ToddyCat	25	9
G0012	Darkhotel	Darkhotel, DUBNIUM, Zigzag Hail	24	0
G0006	APT1	APT1, Comment Crew, Comment Group	23	17
G1030	Agrius	Agrius, Pink Sandstorm, AMERICIUM	22	9
G0108	Blue Mockingbird	Blue Mockingbird	22	2
G0100	Inception	Inception, Inception Framework, Cloud Atlas	22	3
G1047	Velvet Ant	Velvet Ant	22	2
G0073	APT19	APT19, Codoso, C0d0so0	21	2
G0030	Lotus Blossom	Lotus Blossom, DRAGONFISH, Spring Dragon	21	9
G0140	LazyScripter	LazyScripter	20	7
G1033	Star Blizzard	Star Blizzard, SEABORGIUM, Callisto Group	20	1
G1021	Cinnamon Tempest	Cinnamon Tempest, DEV-0401, Emperor Dragonfly	19	8
G0142	Confucius	Confucius, Confucius APT	19	1
G1012	CURIUM	CURIUM, Crimson Sandstorm, TA456	19	1
G0112	Windshift	Windshift, Bahamut	19	1
G1031	Saint Bear	Saint Bear, Storm-0587, TA471	18	2
G1024	Akira	Akira, GOLD SAHARA, PUNK SPIDER	17	8
G1034	Daggerfly	Daggerfly, Evasive Panda, BRONZE HIGHLAND	17	6
G0077	Leafminer	Leafminer, Raspite	17	4
G0001	Axiom	Axiom, Group 72	16	8
G1002	BITTER	BITTER, T-APT-17	16	1
G0078	Gorgon Group	Gorgon Group	16	4
G0021	Molerats	Molerats, Operation Molerats, Gaza Cybergang	16	6
G1008	SideCopy	SideCopy	16	2
G0038	Stealth Falcon	Stealth Falcon	16	0
G0135	BackdoorDiplomacy	BackdoorDiplomacy	15	5
G1011	EXOTIC LILY	EXOTIC LILY	15	2
G0131	Tonto Team	Tonto Team, Earth Akhlut, BRONZE HUNTLEY	15	6
G0098	BlackTech	BlackTech, Palmerworm	14	6
G0019	Naikon	Naikon	14	15
G1045	Salt Typhoon	Salt Typhoon	14	1
G0127	TA551	TA551, GOLD CABIN, Shathak	14	5
G0134	Transparent Tribe	Transparent Tribe, COPPER FIELDSTONE, APT36	14	5
G0122	Silent Librarian	Silent Librarian, TA407, COBALT DICKENS	13	0
G0018	admin@338	admin@338	12	7
G0138	Andariel	Andariel, Silent Chollima, PLUTONIUM	12	2
G0026	APT18	APT18, TG-0416, Dynamite Panda	12	5
G0070	Dark Caracal	Dark Caracal	12	3
G0085	FIN4	FIN4	12	0
G1026	Malteiro	Malteiro	12	1
G1009	Moses Staff	Moses Staff, DEV-0500, Marigold Sandstorm	12	4
G1020	Mustard Tempest	Mustard Tempest, DEV-0206, TA569	12	2
G0120	Evilnum	Evilnum	11	3
G0051	FIN10	FIN10	11	1
G0053	FIN5	FIN5	11	6
G0095	Machete	Machete, APT-C-43, El Machete	11	1
G0068	PLATINUM	PLATINUM	11	3
G0056	PROMETHIUM	PROMETHIUM, StrongPity	11	2
G0105	DarkVishnya	DarkVishnya	10	2
G0009	Deep Panda	Deep Panda, Shell Crew, WebMasters	10	7
G1007	Aoqin Dragon	Aoqin Dragon	9	2
G0008	Carbanak	Carbanak, Anunak	9	4
G0066	Elderwood	Elderwood, Elderwood Gang, Beijing Group	9	9
G0115	GOLD SOUTHFIELD	GOLD SOUTHFIELD, Pinchy Spider	9	2
G1013	Metador	Metador	9	2
G0075	Rancor	Rancor	9	4
G0054	Sowbug	Sowbug	9	2
G0107	Whitefly	Whitefly	9	1
G0052	CopyKittens	CopyKittens	8	4
G1019	MoustachedBouncer	MoustachedBouncer	8	3
G0033	Poseidon Group	Poseidon Group	8	0
G0079	DarkHydrus	DarkHydrus	7	3
G0136	IndigoZebra	IndigoZebra	7	3
G0133	Nomadic Octopus	Nomadic Octopus, DustSquad	7	1
G1005	POLONIUM	POLONIUM, Plaid Rain	7	2
G0048	RTM	RTM	7	1
G0089	The White Company	The White Company	7	2
G0124	Windigo	Windigo	7	1
G0130	Ajax Security Team	Ajax Security Team, Operation Woolen-Goldfish, AjaxTM	6	2
G0137	Ferocious Kitten	Ferocious Kitten	6	2
G0084	Gallmaker	Gallmaker	6	0
G0103	Mofang	Mofang	6	2
G1037	TA577	TA577	6	3
G0044	Winnti Group	Winnti Group, Blackfly	6	3
G0005	APT12	APT12, IXESHE, DynCalc	5	3
G0003	Cleaver	Cleaver, Threat Group 2889, TG-2889	5	4
G1042	RedEcho	RedEcho	5	1
G0039	Suckfly	Suckfly	5	1
G0062	TA459	TA459	5	4
G0123	Volatile Cedar	Volatile Cedar, Lebanese Cedar	5	2
G0020	Equation	Equation	4	0
G0043	Group5	Group5	4	2
G0024	Putter Panda	Putter Panda, APT2, MSUpdater	4	4
G0083	SilverTerrier	SilverTerrier	4	5
G1038	TA578	TA578	4	3
G0028	Threat Group-1314	Threat Group-1314, TG-1314	4	2
G0076	Thrip	Thrip	4	3
G0041	Strider	Strider, ProjectSauron	3	1
G1050	Water Galura	Water Galura, GOLD FEATHER	3	2
G1049	AppleJeus	AppleJeus, Gleaming Pisces, Citrine Sleet	2	0
G0025	APT17	APT17, Deputy Dog	2	1
G0013	APT30	APT30	2	5
G0036	GCMAN	GCMAN	2	0
G0071	Orangeworm	Orangeworm	2	8
G0011	PittyTiger	PittyTiger	2	5
G0023	APT16	APT16	1	1
G0063	BlackOasis	BlackOasis	1	0
G0002	Moafee	Moafee	1	1
G0029	Scarlet Mimic	Scarlet Mimic	1	4
G1028	APT-C-23	APT-C-23, Mantis, Arid Viper	0	1
G0017	DragonOK	DragonOK	0	2
G0055	NEODYMIUM	NEODYMIUM	0	1
G0088	TEMP.Veles	TEMP.Veles, XENOTIME	0	2