Overview
This page lists all known threat actors that have been observed using Xploit.
Threat Actors
- Adrastea
- Alpha Spider
- ANTHROPOID SPIDER ([“[Unknown]”])
- antibrok3rs
- APT16 (China) - High
- APT18 (China) - High
- Asnarök
- Atomsilo
- Babuk-Locker
- babylockerkz
- Belsen Group
- Bianlian
- Bl00dy Ransomware Gang
- Black Basta Affiliates
- black nevas
- blackbit
- Blacktail
- BladedFeline (Iran)
- BlueHornet
- BOSON SPIDER ([“[Unknown]”])
- BrazenBamboo (China)
- BRONZE EDGEWOOD (China)
- BRONZE SPIRAL (China)
- BRONZE SPRING (China)
- Buran
- ByteToBreach
- cactus
- CACTUS Ransomware Actors
- Caramel Tsunami (Israel)
- Carmine Tsunami (Israel)
- CashRewindo
- ChainedShark
- Chaya_004 (China)
- chilelocker
- CHRYSENE (Unknown) - High
- CL-STA-0043 (China)
- CL-STA-0048 (China)
- Cleaver (Iran) - High
- Codefinger
- core
- CosmicBeetle
- Crimson Collective
- CRYSTALRAY
- Cuba
- CyberCartel
- Daixin
- Daixin Team
- DarkCasino ([“[Unknown]”])
- DarkPink (China)
- dataf locker
- Denim Tsunami (Austria)
- DEV-0147 (China)
- DEV-0950
- DragonRank
- DriftingCloud (China)
- Earth Alux (China)
- Earth Baxia (China)
- Earth Krahang (China)
- Earth Lamia (China)
- Earth Naga (China)
- Earth Sirrush (Russia)
- eCh0raix
- elpaco
- ELUSIVE COMET (North Korea)
- Equation
- EvilTraffic
- ExCobalt
- EXOTIC LILY (Russia)
- Fail0verflow
- FASTCash
- Femwar02 (Russia)
- FIN11
- Flax Typhoon (China)
- FlowerStorm
- FlyingYeti (Russia)
- freeworld
- FrostyNeighbor (Belarus)
- Fulcrumsec
- GALLIUM (China)
- GandCrab
- GetCrypt
- Ghost Jackal ([“[Unknown]”])
- GHOST STADIUM (China)
- Gitloker
- globe
- GOLD GARDEN
- GOLD OGRE
- GTG-10007
- GTG-1002 (China)
- gwisin
- HAFNIUM (China) - Critical
- Handala
- Head Mare
- hermes
- Hezb
- holyghost
- HookAds
- Hotarus
- Houken (China)
- Hunt
- Hunt3r Kill3rs (Russia)
- IcePeony (China)
- INJ3CTOR3
- insane ransomware
- IronErn440
- ItaDuke (China)
- JACKPOT PANDA (China)
- JadePuffer
- JavaGhost
- Jokeroo
- k0t
- Kairos
- kasseika
- Kazu
- Lancefly ([“[Unknown]”])
- Larva-24005 (North Korea)
- Larva-26002
- Lilac Typhoon (China)
- LilacSquid
- LIMINAL PANDA (China)
- LockBit Ransomware Actors & Affiliates
- Lucky Cat ([“China”])
- Magniber Ransomware
- Malsmoke
- Massgrave
- Medusa (Unknown) - High
- MedusaLocker Ransomware Actors
- Mora_001 (Russia)
- Mr_Rot13
- NewsPenguin
- Nexus Zeta
- NOMAD PANDA (China)
- NOTROBIN
- NyxarGroup
- OilRig (Iran) - High
- Opal Sleet (North Korea)
- Operation ForumTroll
- Operation Sharpshooter
- Operation Triangulation ([“[Unknown]”])
- PayTool
- Phobos
- PLATINUM (Singapore)
- PlushDaemon (China)
- POISON CARP (China)
- PoisonSeed
- PowerPool ([“[Unknown]”])
- Princess Evolution
- ProCC
- Prophet Spider
- QTFY (China)
- RansomHub (Unknown) - Critical
- RansomVC
- RAZOR TIGER (India)
- Red Menshen (China)
- RedJuliett (China)
- RedKitten
- Roaming Mantis ([“[Unknown]”])
- RUBYCARP (Romania)
- SandCat ([“Uzbekistan”])
- sarcoma
- SCARLETEEL
- ScreamedJungle
- Shadow-Earth-053 (China)
- SHADOW-WATER-063 (Brazil)
- ShinyHunters ([“[Unknown]”])
- Silent Chollima (North Korea) - High
- SilitNetwork
- SilkSpecter (China)
- SingularityMD
- Sinobi
- SkidSec
- SLIME88 (China)
- SongXY
- SPIKEDWINE
- Storm-0062 (China)
- Storm-0249
- Storm-0473 (Kazakhstan)
- Storm-0494
- Storm-0501
- Storm-0506
- Storm-0835
- Storm-0940 (China)
- Storm-1175 (China)
- Storm-1849 (China)
- Storm-1977
- Storm-2077 (China)
- Storm-2139
- Storm-2460
- Storm-2603 (China)
- Storm-2949
- SynoLocker
- TA428 (China)
- TA829 (Russia)
- TAG-112 (China)
- TAG-140 (Pakistan)
- Team46
- TeamTNT
- TEMP_Heretic (China)
- Termite Ransomware Operators
- The Shadow Brokers ([“USA”])
- TiltedTemple (China)
- TridentLocker
- TRIPLESTRENGTH
- Tstark (China)
- TwoSail Junk ([“China”])
- UAC-0063
- UAC-0194 (Russia)
- UAC-0241
- UAT-10147 (China)
- UAT-11473
- UAT-5918
- UAT-6275
- UAT-6382 (China)
- UAT-7810 (China)
- UAT-8616
- UAT-8837 (China)
- UAT-9686 (China)
- UAT-9921 (China)
- Uiwix Ransomware
- Ukrainian Cyber Alliance (Ukraine)
- UNC2659
- UNC2970 (North Korea)
- UNC3569 (China)
- UNC3784 (China)
- UNC3886 (China)
- UNC3973
- UNC4487
- UNC4540 (China)
- UNC5174
- UNC5266
- UNC5325 (China)
- UNC5337 (China)
- UNC5820
- UNC6040
- UNC6148
- UNC6201 (China)
- UNC6384 (China)
- UNC6426
- UNC6485
- UNC6508 (China)
- UNC6748 (Russia)
- UTA0178 (China)
- UTA0218
- UTA0352 (Russia)
- UTA0533
- UTA0576
- UTG-Q-010
- Vapor Panda (China)
- Velvet Ant (China)
- Velvet Ant (Deprecated) (China)
- VENOM SPIDER
- VICE SPIDER (Russia)
- Void Arachne ([“China”])
- Void Banshee
- WARP PANDA (China)
- Water Bakunawa
- Water Barghest
- Water Gamayun (Russia)
- Water Makara
- Water Sigbin (China)
- Whitearmor
- WIZARD SPIDER (Russia)
- XinXin (China)
- ZeroSevenGroup