216.73.216.170

Intrusion sets

APT groups and intrusion sets — goals, aliases, sectors, and related campaigns.

  • Augmented Marauder
    AlienVault Confidence 100 1 Malware 14 IOCs
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Chinese-nexus threat actor
    AlienVault Confidence 100 11 MITREs 1 Malware
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • BreachForums
    AlienVault Confidence 100 8 MITREs 10 IOCs
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • APT31 Violet TyphoonZIRCONIUM
    The MITRE Corporation Confidence 100 60 MITREs 15 Malwares 66 IOCs

    [ZIRCONIUM](https://attack.mitre.org/groups/G0128) is a threat group operating out of China, active since at least 2017, that has targeted individuals associated with the 2020 US presidential election and prominent leaders…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • CyberAv3ngers Soldiers of Soloman
    The MITRE Corporation Confidence 100 20 MITREs 1 Malware 3 IOCs 1 Campaign

    The [CyberAv3ngers](https://attack.mitre.org/groups/G1027) are a suspected Iranian Government Islamic Revolutionary Guard Corps (IRGC)-affiliated APT group. The [CyberAv3ngers](https://attack.mitre.org/groups/G1027) have been known to be active since at least 2020, with disputed…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • ALLANITE Palmetto Fusion
    The MITRE Corporation Confidence 100 4 MITREs

    [ALLANITE](https://attack.mitre.org/groups/G1000) is a suspected Russian cyber espionage group, that has primarily targeted the electric utility sector within the United States and United Kingdom. The group's tactics and techniques…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • UNC788
    The MITRE Corporation Confidence 100 1 MITRE 1 Malware

    [UNC788](https://attack.mitre.org/groups/G1029) is a group of hackers from Iran that has targeted people in the Middle East.(Citation: Meta Adversarial Threat Report 2022)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Bouncing Golf
    The MITRE Corporation Confidence 100 1 MITRE 1 Malware

    [Bouncing Golf](https://attack.mitre.org/groups/G0097) is a cyberespionage campaign targeting Middle Eastern countries.(Citation: Trend Micro Bouncing Golf 2019)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • North Korean APT group
    AlienVault Confidence 100 18 MITREs 1 Malware 22 IOCs
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • APT-C-23 MantisDesert Falcon
    The MITRE Corporation Confidence 100 21 MITREs 8 Malwares 51 IOCs

    [APT-C-23](https://attack.mitre.org/groups/G1028) is a threat group that has been active since at least 2014.(Citation: symantec_mantis) [APT-C-23](https://attack.mitre.org/groups/G1028) has primarily focused its operations on the Middle East, including Israeli military assets.…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Taidoor
    The MITRE Corporation Confidence 100

    [Taidoor](https://attack.mitre.org/groups/G0015) has been deprecated, as the only technique it was linked to was deprecated in ATT&CK v7.

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • DragonOK
    The MITRE Corporation Confidence 100 2 Malwares

    [DragonOK](https://attack.mitre.org/groups/G0017) is a threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, [DragonOK](https://attack.mitre.org/groups/G0017) is thought to have a direct…

    First seen 01/01/1970 · Last seen 16/11/5138 ·