Group directory — apt.directory

APT-C-23

G1028 — attribution (assessment) 2014–

Aliases: APT-C-23 · Arid Viper · Big Bang APT · Desert Falcon · Grey Karkadann · Mantis…

APT-C-36

G0099 — attribution (assessment) 2018–

Aliases: APT-C-36 · APT-Q-98 · AguilaCiega · Blind Eagle · TAG-144

APT1

G0006 China attribution (assessment) —

Aliases: APT1 · Comment Crew · Comment Group · Comment Panda

APT12

G0005 — attribution (assessment) —

Aliases: APT12 · DNSCALC · DynCalc · IXESHE · Numbered Panda

APT16

G0023 China attribution (assessment) —

Aliases: APT16

APT17

G0025 China attribution (assessment) —

Aliases: APT17 · Deputy Dog

APT18

G0026 — attribution (assessment) 2009–

Aliases: APT18 · Dynamite Panda · TG-0416 · Threat Group-0416

APT19

G0073 China attribution (assessment) —

Aliases: APT19 · C0d0so0 · Codoso · Codoso Team · Sunshop Group

APT28

G0007 Russia attribution (assessment) 2004–

Aliases: APT28 · FROZENLAKE · Fancy Bear · Forest Blizzard · Group 74 · GruesomeLarch ·…

APT29

G0016 Russia attribution (assessment) 2008–

Aliases: APT29 · Blue Kitsune · Cozy Bear · CozyDuke · Dark Halo · IRON HEMLOCK · IRON R…

APT3

G0022 China attribution (assessment) —

Aliases: APT3 · Buckeye · Gothic Panda · Pirpi · TG-0110 · Threat Group-0110 · UPS Team

APT30

G0013 — attribution (assessment) —

Aliases: APT30

APT32

G0050 Vietnam attribution (assessment) 2014–

Aliases: APT-C-00 · APT32 · BISMUTH · Canvas Cyclone · OceanLotus · SeaLotus · 海莲花

APT33

G0064 Iran attribution (assessment) 2013–

Aliases: APT33 · Elfin · HOLMIUM · Peach Sandstorm

APT34

G0057 Iran attribution (assessment) —

Aliases: APT34

APT37

G0067 DPRK attribution (assessment) 2012–

Aliases: APT37 · Group123 · InkySquid · Reaper · Ricochet Chollima · ScarCruft · TEMP.Re…

APT38

G0082 DPRK attribution (assessment) 2014–

Aliases: APT38 · BeagleBoyz · Bluenoroff · COPERNICIUM · NICKEL GLADSTONE · Sapphire Sle…

APT39

G0087 — attribution (assessment) 2014–

Aliases: APT39 · Chafer · ITG07 · Remix Kitten

APT41

G0096 China attribution (assessment) 2012–

Aliases: APT41 · BARIUM · Brass Typhoon · Wicked Panda

APT42

G1044 Iran attribution (assessment) 2015–

Aliases: APT42

APT5

G1023 China attribution (assessment) 2007–

Aliases: APT5 · BRONZE FLEETWOOD · Keyhole Panda · MANGANESE · Mulberry Typhoon · UNC2630

Agrius

G1030 Iran attribution (assessment) —

Aliases: AMERICIUM · Agonizing Serpens · Agrius · BlackShadow · Pink Sandstorm

Ajax Security Team

G0130 — attribution (assessment) 2010–

Aliases: Ajax Security Team · AjaxTM · Flying Kitten · Operation Saffron Rose · Operatio…

Akira

G1024 — attribution (assessment) —

Aliases: Akira · GOLD SAHARA · Howling Scorpius · PUNK SPIDER

Andariel

G0138 DPRK attribution (assessment) 2009–

Aliases: Andariel · Onyx Sleet · PLUTONIUM · Silent Chollima

Aoqin Dragon

G1007 China attribution (assessment) 2013–

Aliases: Aoqin Dragon

AppleJeus

G1049 DPRK attribution (assessment) 2018–

Aliases: AppleJeus · Citrine Sleet · Gleaming Pisces · UNC1720 · UNC4736

Aquatic Panda

G0143 China attribution (assessment) —

Aliases: Aquatic Panda

Axiom

G0001 China attribution (assessment) 2008–

Aliases: Axiom · Group 72

BITTER

G1002 Pakistan attribution (assessment) 2013–

Aliases: BITTER · T-APT-17 · 蔓灵花

BRONZE BUTLER

G0060 — attribution (assessment) 2008–

Aliases: BRONZE BUTLER · REDBALDKNIGHT · Tick

BackdoorDiplomacy

G0135 — attribution (assessment) 2017–

Aliases: BackdoorDiplomacy

BlackByte

G1043 — attribution (assessment) 2021–

Aliases: BlackByte · Hecamede

BlackOasis

G0063 — attribution (assessment) —

Aliases: BlackOasis

BlackTech

G0098 China attribution (assessment) 2013–

Aliases: BlackTech · Palmerworm

Blue Mockingbird

G0108 — attribution (assessment) —

Aliases: Blue Mockingbird

CURIUM

G1012 Iran attribution (assessment) —

Aliases: CURIUM · Crimson Sandstorm · TA456 · Tortoise Shell · Yellow Liderc

Carbanak

G0008 — attribution (assessment) 2013–

Aliases: Anunak · Carbanak

Charming Kitten

G0058 Iran attribution (assessment) —

Aliases: Charming Kitten

Chimera

G0114 China attribution (assessment) 2018–

Aliases: Chimera

Cinnamon Tempest

G1021 China attribution (assessment) 2021–

Aliases: BRONZE STARLIGHT · Cinnamon Tempest · DEV-0401 · Emperor Dragonfly

Cleaver

G0003 Iran attribution (assessment) —

Aliases: Cleaver · TG-2889 · Threat Group 2889

Cobalt Group

G0080 — attribution (assessment) 2016–

Aliases: Cobalt Gang · Cobalt Group · Cobalt Spider · GOLD KINGSWOOD

Confucius

G0142 — attribution (assessment) 2013–

Aliases: Confucius · Confucius APT

Contagious Interview

G1052 — attribution (assessment) —

Aliases: Contagious Interview · DEV#POPPER · DeceptiveDevelopment · Gwisin Gang · Purple…

CopyKittens

G0052 Iran attribution (assessment) 2013–

Aliases: CopyKittens

CostaRicto

G0132 — attribution (assessment) 2019–

Aliases: CostaRicto

Daggerfly

G1034 — attribution (assessment) 2012–

Aliases: BRONZE HIGHLAND · Daggerfly · Evasive Panda

Dark Caracal

G0070 — attribution (assessment) 2012–

Aliases: Dark Caracal

DarkHydrus

G0079 — attribution (assessment) 2016–

Aliases: DarkHydrus

DarkVishnya

G0105 — attribution (assessment) —

Aliases: DarkVishnya

Darkhotel

G0012 South Korea attribution (assessment) 2004–

Aliases: DUBNIUM · Darkhotel · Zigzag Hail

Deep Panda

G0009 China attribution (assessment) —

Aliases: Black Vine · Deep Panda · KungFu Kittens · PinkPanther · Shell Crew · WebMasters

DragonOK

G0017 — attribution (assessment) —

Aliases: DragonOK

Dragonfly

G0035 Russia attribution (assessment) 2010–

Aliases: BROMINE · Berserk Bear · Crouching Yeti · DYMALLOY · Dragonfly · Energetic Bear…

Dragonfly 2.0

G0074 Russia attribution (assessment) —

Aliases: Berserk Bear · DYMALLOY · Dragonfly 2.0 · IRON LIBERTY

Dust Storm

G0031 — attribution (assessment) —

Aliases: Dust Storm

EXOTIC LILY

G1011 — attribution (assessment) —

Aliases: EXOTIC LILY

Earth Lusca

G1006 China attribution (assessment) —

Aliases: CHROMIUM · Charcoal Typhoon · ControlX · Earth Lusca · TAG-22

Elderwood

G0066 China attribution (assessment) —

Aliases: Beijing Group · Elderwood · Elderwood Gang · Sneaky Panda

Ember Bear

G1003 Russia attribution (assessment) 2020–

Aliases: Bleeding Bear · Cadet Blizzard · DEV-0586 · Ember Bear · Frozenvista · UAC-0056…

Equation

G0020 — attribution (assessment) —

Aliases: Equation

Evilnum

G0120 — attribution (assessment) 2018–

Aliases: Evilnum

FIN10

G0051 — attribution (assessment) 2013–

Aliases: FIN10

FIN13

G1016 — attribution (assessment) —

Aliases: Elephant Beetle · FIN13

FIN4

G0085 — attribution (assessment) 2013–

Aliases: FIN4

FIN5

G0053 — attribution (assessment) 2008–

Aliases: FIN5

FIN6

G0037 — attribution (assessment) —

Aliases: Camouflage Tempest · FIN6 · ITG08 · Magecart Group 6 · Skeleton Spider · TAAL

FIN7

G0046 — attribution (assessment) —

Aliases: Carbon Spider · ELBRUS · FIN7 · GOLD NIAGARA · ITG14 · Sangria Tempest

FIN8

G0061 — attribution (assessment) —

Aliases: FIN8 · Syssphinx

Ferocious Kitten

G0137 — attribution (assessment) 2015–

Aliases: Ferocious Kitten

Fox Kitten

G0117 — attribution (assessment) 2017–

Aliases: Fox Kitten · Lemon Sandstorm · Parisite · Pioneer Kitten · RUBIDIUM · UNC757

Frankenstein

G0101 — attribution (assessment) —

Aliases: Frankenstein

GALLIUM

G0093 — attribution (assessment) 2012–

Aliases: GALLIUM · Granite Typhoon

GCMAN

G0036 — attribution (assessment) —

Aliases: GCMAN

GOLD SOUTHFIELD

G0115 — attribution (assessment) 2018–

Aliases: GOLD SOUTHFIELD · Pinchy Spider

Gallmaker

G0084 — attribution (assessment) —

Aliases: Gallmaker

Gamaredon Group

G0047 Russia attribution (assessment) 2013–

Aliases: ACTINIUM · Aqua Blizzard · Armageddon · DEV-0157 · Gamaredon Group · IRON TILDE…

Gelsemium

G0141 — attribution (assessment) 2014–

Aliases: Gelsemium

Gorgon Group

G0078 — attribution (assessment) —

Aliases: Gorgon Group

Group5

G0043 — attribution (assessment) —

Aliases: Group5

HAFNIUM

G0125 — attribution (assessment) —

Aliases: HAFNIUM · Operation Exchange Marauder · Silk Typhoon

HEXANE

G1001 — attribution (assessment) 2017–

Aliases: HEXANE · Lyceum · Siamesekitten · Spirlin

Higaisa

G0126 — attribution (assessment) —

Aliases: Higaisa

Honeybee

G0072 — attribution (assessment) —

Aliases: Honeybee

INC Ransom

G1032 — attribution (assessment) —

Aliases: GOLD IONIC · INC Ransom

Inception

G0100 — attribution (assessment) 2014–

Aliases: Cloud Atlas · Inception · Inception Framework

IndigoZebra

G0136 China attribution (assessment) 2014–

Aliases: IndigoZebra

Indrik Spider

G0119 Russia attribution (assessment) 2014–

Aliases: DEV-0243 · Evil Corp · Indrik Spider · Manatee Tempest · UNC2165

Ke3chang

G0004 — attribution (assessment) 2010–

Aliases: APT15 · GREF · Ke3chang · Mirage · NICKEL · Nylon Typhoon · Playful Dragon · Ro…

Kimsuky

G0094 DPRK attribution (assessment) 2012–

Aliases: APT43 · Black Banshee · Earth Kumiho · Emerald Sleet · Kimsuky · PatheticSlug ·…

LAPSUS$

G1004 — attribution (assessment) —

Aliases: DEV-0537 · LAPSUS$ · Strawberry Tempest

Lazarus Group

G0032 DPRK attribution (assessment) 2009–

Aliases: Diamond Sleet · Guardians of Peace · HIDDEN COBRA · Labyrinth Chollima · Lazaru…

LazyScripter

G0140 — attribution (assessment) 2018–

Aliases: LazyScripter

Leafminer

G0077 Iran attribution (assessment) 2017–

Aliases: Leafminer · Raspite

Leviathan

G0065 China attribution (assessment) 2009–

Aliases: APT40 · BRONZE MOHAWK · Gadolinium · Gingham Typhoon · Kryptonite Panda · Levia…

Lotus Blossom

G0030 — attribution (assessment) 2009–

Aliases: Bilbug · DRAGONFISH · Lotus Blossom · RADIUM · Raspberry Typhoon · Spring Drago…

LuminousMoth

G1014 China attribution (assessment) —

Aliases: LuminousMoth

MONSOON

G0042 — attribution (assessment) —

Aliases: MONSOON

Machete

G0095 — attribution (assessment) 2010–

Aliases: APT-C-43 · El Machete · Machete

Magic Hound

G0059 Iran attribution (assessment) 2014–

Aliases: APT35 · COBALT ILLUSION · Charming Kitten · ITG18 · Magic Hound · Mint Sandstor…

Malteiro

G1026 — attribution (assessment) —

Aliases: Malteiro

Medusa Group

G1051 — attribution (assessment) 2021–

Aliases: Medusa Group

Metador

G1013 — attribution (assessment) —

Aliases: Metador

MirrorFace

G1054 — attribution (assessment) 2019–

Aliases: Earth Kasha · MirrorFace

Moafee

G0002 — attribution (assessment) —

Aliases: Moafee

Mofang

G0103 — attribution (assessment) —

Aliases: Mofang

Molerats

G0021 — attribution (assessment) —

Aliases: Gaza Cybergang · Molerats · Operation Molerats

Moonstone Sleet

G1036 DPRK attribution (assessment) —

Aliases: Moonstone Sleet · Storm-1789

Moses Staff

G1009 Iran attribution (assessment) —

Aliases: DEV-0500 · Marigold Sandstorm · Moses Staff

MoustachedBouncer

G1019 — attribution (assessment) 2014–

Aliases: MoustachedBouncer

MuddyWater

G0069 — attribution (assessment) 2017–

Aliases: Earth Vetala · MERCURY · Mango Sandstorm · MuddyKrill · MuddyWater · Seedworm ·…

Mustang Panda

G0129 China attribution (assessment) 2012–

Aliases: BRONZE PRESIDENT · CAMARO DRAGON · ClumsyToad · EARTH PRETA · FIREANT · HIVE015…

Mustard Tempest

G1020 — attribution (assessment) 2017–

Aliases: DEV-0206 · GOLD PRELUDE · Mustard Tempest · TA569 · UNC1543

NEODYMIUM

G0055 — attribution (assessment) —

Aliases: NEODYMIUM

NIMBUS MANTICORE

G1059 — attribution (assessment) —

Aliases: COBALT SMOKEY · NIMBUS MANTICORE · TA455 · UNC1549

Naikon

G0019 — attribution (assessment) 2010–

Aliases: Naikon

Night Dragon

G0014 — attribution (assessment) —

Aliases: Night Dragon

Nomadic Octopus

G0133 Russia attribution (assessment) 2014–

Aliases: DustSquad · Nomadic Octopus

OilRig

G0049 Iran attribution (assessment) 2014–

Aliases: APT34 · COBALT GYPSY · Crambus · EUROPIUM · Earth Simnavaz · Evasive Serpens ·…

Operation Wocao

G0116 China attribution (assessment) —

Aliases: Operation Wocao

Orangeworm

G0071 — attribution (assessment) 2015–

Aliases: Orangeworm

PLATINUM

G0068 — attribution (assessment) 2009–

Aliases: PLATINUM

POLONIUM

G1005 — attribution (assessment) —

Aliases: POLONIUM · Plaid Rain

PROMETHIUM

G0056 — attribution (assessment) 2012–

Aliases: PROMETHIUM · StrongPity

Patchwork

G0040 — attribution (assessment) —

Aliases: Chinastrats · Dropping Elephant · Hangover Group · MONSOON · Operation Hangover…

PittyTiger

G0011 — attribution (assessment) —

Aliases: PittyTiger

Play

G1040 — attribution (assessment) 2022–

Aliases: Play

Poseidon Group

G0033 — attribution (assessment) 2005–

Aliases: Poseidon Group

Putter Panda

G0024 China attribution (assessment) —

Aliases: APT2 · MSUpdater · Putter Panda

RTM

G0048 — attribution (assessment) 2015–

Aliases: RTM

Rancor

G0075 — attribution (assessment) —

Aliases: Rancor

RedCurl

G1039 Russia attribution (assessment) —

Aliases: RedCurl

RedEcho

G1042 — attribution (assessment) —

Aliases: RedEcho

Rocke

G0106 — attribution (assessment) —

Aliases: Rocke

Saint Bear

G1031 Russia attribution (assessment) —

Aliases: Lorec53 · Saint Bear · Storm-0587 · TA471 · UAC-0056

Salt Typhoon

G1045 — attribution (assessment) 2019–

Aliases: Salt Typhoon

Sandworm Team

G0034 Russia attribution (assessment) 2009–

Aliases: APT44 · BlackEnergy (Group) · ELECTRUM · FROZENBARENTS · IRIDIUM · IRON VIKING…

Scarlet Mimic

G0029 — attribution (assessment) —

Aliases: Scarlet Mimic

Scattered Spider

G1015 — attribution (assessment) 2022–

Aliases: Octo Tempest · Roasted 0ktapus · Scattered Spider · Storm-0875 · UNC3944

Sea Turtle

G1041 — attribution (assessment) 2017–

Aliases: Cosmic Wolf · Marbled Dust · SILICON · Sea Turtle · Teal Kurma

Sharpshooter

G0104 — attribution (assessment) —

Aliases: Sharpshooter

ShinyHunters

G1057 — attribution (assessment) 2019–

Aliases: Bling Libra · ShinyHunters · UNC6240

SideCopy

G1008 Pakistan attribution (assessment) 2019–

Aliases: SideCopy

Sidewinder

G0121 India attribution (assessment) 2012–

Aliases: Rattlesnake · Sidewinder · T-APT-04 · 响尾蛇

Silence

G0091 — attribution (assessment) —

Aliases: Silence · Whisper Spider

Silent Librarian

G0122 — attribution (assessment) 2013–

Aliases: COBALT DICKENS · Silent Librarian · TA407

SilverTerrier

G0083 — attribution (assessment) —

Aliases: SilverTerrier

Sowbug

G0054 — attribution (assessment) 2015–

Aliases: Sowbug

Star Blizzard

G1033 — attribution (assessment) 2019–

Aliases: COLDRIVER · Callisto Group · SEABORGIUM · Star Blizzard · TA446

Stealth Falcon

G0038 — attribution (assessment) 2012–

Aliases: Stealth Falcon

Stolen Pencil

G0086 — attribution (assessment) —

Aliases: Stolen Pencil

Storm-0501

G1053 — attribution (assessment) —

Aliases: Storm-0501

Storm-1811

G1046 — attribution (assessment) —

Aliases: Storm-1811

Strider

G0041 — attribution (assessment) 2011–

Aliases: ProjectSauron · Strider

Suckfly

G0039 China attribution (assessment) 2014–

Aliases: Suckfly

TA2541

G1018 — attribution (assessment) 2017–

Aliases: TA2541

TA459

G0062 — attribution (assessment) —

Aliases: TA459

TA505

G0092 — attribution (assessment) 2014–

Aliases: CHIMBORAZO · Hive0065 · Spandex Tempest · TA505

TA551

G0127 — attribution (assessment) 2018–

Aliases: GOLD CABIN · Shathak · TA551

TA577

G1037 — attribution (assessment) —

Aliases: TA577

TA578

G1038 — attribution (assessment) —

Aliases: TA578

TEMP.Veles

G0088 Russia attribution (assessment) —

Aliases: TEMP.Veles · XENOTIME

Taidoor

G0015 — attribution (assessment) —

Aliases: Taidoor

TeamPCP

G1056 — attribution (assessment) —

Aliases: DeadCatx3 · PCPCat · SHADOW-WATER-058 · ShellForce · TeamPCP · UNC6780

TeamTNT

G0139 — attribution (assessment) —

Aliases: TeamTNT

The Gentlemen

G1058 — attribution (assessment) —

Aliases: GOLD SHERWOOD · Storm-2697 · The Gentlemen

The White Company

G0089 — attribution (assessment) —

Aliases: The White Company

Threat Group-1314

G0028 — attribution (assessment) —

Aliases: TG-1314 · Threat Group-1314

Threat Group-3390

G0027 China attribution (assessment) 2010–

Aliases: APT27 · BRONZE UNION · Earth Smilodon · Emissary Panda · Iron Tiger · Linen Typ…

Thrip

G0076 — attribution (assessment) —

Aliases: Thrip

ToddyCat

G1022 — attribution (assessment) 2020–

Aliases: ToddyCat

Tonto Team

G0131 China attribution (assessment) 2009–

Aliases: BRONZE HUNTLEY · CactusPete · Earth Akhlut · Karma Panda · Tonto Team

Transparent Tribe

G0134 Pakistan attribution (assessment) 2013–

Aliases: APT36 · COPPER FIELDSTONE · Mythic Leopard · ProjectM · Transparent Tribe

Tropic Trooper

G0081 — attribution (assessment) —

Aliases: KeyBoy · Pirate Panda · Tropic Trooper

Turla

G0010 Russia attribution (assessment) 2004–

Aliases: BELUGASTURGEON · Group 88 · IRON HUNTER · Krypton · Secret Blizzard · Snake · T…

UNC2452

G0118 Russia attribution (assessment) —

Aliases: Dark Halo · NOBELIUM · StellarParticle · UNC2452

UNC3886

G1048 — attribution (assessment) 2022–

Aliases: UNC3886

VOID MANTICORE

G1055 — attribution (assessment) —

Aliases: BANISHED KITTEN · COBALT MYSTIQUE · Handala Hack · Homeland Justice · Karma · K…

Velvet Ant

G1047 — attribution (assessment) 2021–

Aliases: Velvet Ant

Volatile Cedar

G0123 Lebanon attribution (assessment) —

Aliases: Lebanese Cedar · Volatile Cedar

Volt Typhoon

G1017 — attribution (assessment) 2021–

Aliases: BRONZE SILHOUETTE · DEV-0391 · DazedToad · Insidious Taurus · UNC3236 · Vanguar…

WIRTE

G0090 — attribution (assessment) —

Aliases: Ashen Lepus · WIRTE

Water Galura

G1050 — attribution (assessment) 2022–

Aliases: GOLD FEATHER · Water Galura

Whitefly

G0107 — attribution (assessment) 2017–

Aliases: Whitefly

Windigo

G0124 — attribution (assessment) 2011–

Aliases: Windigo

Windshift

G0112 — attribution (assessment) 2017–

Aliases: Bahamut · Windshift

Winnti Group

G0044 — attribution (assessment) 2010–

Aliases: Blackfly · Winnti Group

Winter Vivern

G1035 — attribution (assessment) 2020–

Aliases: TA473 · UAC-0114 · Winter Vivern

Wizard Spider

G0102 Russia attribution (assessment) 2016–

Aliases: DEV-0193 · DEV-0237 · FIN12 · GOLD BLACKBURN · Grim Spider · ITG23 · Periwinkle…

ZIRCONIUM

G0128 — attribution (assessment) 2017–

Aliases: APT31 · Violet Typhoon · ZIRCONIUM

admin@338

G0018 China attribution (assessment) —

Aliases: admin@338

menuPass

G0045 — attribution (assessment) 2006–

Aliases: APT10 · BRONZE RIVERSIDE · CVNX · Cicada · HOGFISH · POTASSIUM · Red Apollo · S…