Void Blizzard
Void Blizzard’s cyberespionage operations tend to be highly targeted at specific organizations of interest to the Russian gover...
🔍 Threat Actor Database
Comprehensive threat intelligence on 1,000+ APT groups, ransomware operations, and cybercriminal organizations.
3613
Threat Actors
70
Countries
4
Risk Levels
Recently Updated
Freshly reviewed actor profiles from the precomputed index.
Vanilla Tempest
Vice Society is a ransomware group that has been active since at least June 2021. They primarily target the education and healt...
UTA0355
UTA0355 is a Russian threat actor that conducts phishing campaigns targeting individuals and organizations associated with Ukra...
UTA0352
UTA0352 is a Russian threat actor attributed to phishing campaigns that exploit Microsoft OAuth 2.0 authentication workflows, o...
Storm-2603
The group Microsoft tracks as Storm-2603 is assessed with medium confidence to be a China-based threat actor. Microsoft has not...
Sandworm
This threat actor targets industrial control systems, using a tool called Black Energy, associated with electricity and power g...
SafePay
SafePay is a ransomware group particularly active in Germany, responsible for 24% of the 74 ransomware victims reported in the ...
Ryuk
Ryuk is a ransomware operation known for targeting large organizations and demanding high ransom payments.