216.73.217.98

Intrusion sets

APT groups and intrusion sets — goals, aliases, sectors, and related campaigns.

  • North Korean APT group
    AlienVault Confidence 100 18 MITREs 1 Malware 22 IOCs
    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • APT-C-23 MantisDesert Falcon
    The MITRE Corporation Confidence 100 21 MITREs 8 Malwares 51 IOCs

    [APT-C-23](https://attack.mitre.org/groups/G1028) is a threat group that has been active since at least 2014.(Citation: symantec_mantis) [APT-C-23](https://attack.mitre.org/groups/G1028) has primarily focused its operations on the Middle East, including Israeli military assets.…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Taidoor
    The MITRE Corporation Confidence 100

    [Taidoor](https://attack.mitre.org/groups/G0015) has been deprecated, as the only technique it was linked to was deprecated in ATT&CK v7.

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • DragonOK
    The MITRE Corporation Confidence 100 2 Malwares

    [DragonOK](https://attack.mitre.org/groups/G0017) is a threat group that has targeted Japanese organizations with phishing emails. Due to overlapping TTPs, including similar custom tools, [DragonOK](https://attack.mitre.org/groups/G0017) is thought to have a direct…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • NEODYMIUM
    The MITRE Corporation Confidence 100 1 Malware

    [NEODYMIUM](https://attack.mitre.org/groups/G0055) is an activity group that conducted a campaign in May 2016 and has heavily targeted Turkish victims. The group has demonstrated similarity to another activity group called…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Moafee
    The MITRE Corporation Confidence 100 1 CVE 1 MITRE 1 Malware 28 IOCs

    [Moafee](https://attack.mitre.org/groups/G0002) is a threat group that appears to operate from the Guandong Province of China. Due to overlapping TTPs, including similar custom tools, Moafee is thought to have…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • APT16
    The MITRE Corporation Confidence 100 1 MITRE 1 Malware

    [APT16](https://attack.mitre.org/groups/G0023) is a China-based threat group that has launched spearphishing campaigns targeting Japanese and Taiwanese organizations. (Citation: FireEye EPS Awakens Part 2)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • TA578
    The MITRE Corporation Confidence 100 28 MITREs 8 Malwares 113 IOCs

    [TA578](https://attack.mitre.org/groups/G1038) is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including [Latrodectus](https://attack.mitre.org/software/S1160), [IcedID](https://attack.mitre.org/software/S0483), and [Bumblebee](https://attack.mitre.org/software/S1039).(Citation: Latrodectus APR…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Scarlet Mimic
    The MITRE Corporation Confidence 100 1 MITRE 4 Malwares

    [Scarlet Mimic](https://attack.mitre.org/groups/G0029) is a threat group that has targeted minority rights activists. This group has not been directly linked to a government source, but the group's motivations appear…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • SilverTerrier
    The MITRE Corporation Confidence 100 4 MITREs 5 Malwares

    [SilverTerrier](https://attack.mitre.org/groups/G0083) is a Nigerian threat group that has been seen active since 2014. [SilverTerrier](https://attack.mitre.org/groups/G0083) mainly targets organizations in high technology, higher education, and manufacturing.(Citation: Unit42 SilverTerrier 2018)(Citation: Unit42…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Strider ProjectSauron
    The MITRE Corporation Confidence 100 3 MITREs 1 Malware

    [Strider](https://attack.mitre.org/groups/G0041) is a threat group that has been active since at least 2011 and has targeted victims in Russia, China, Sweden, Belgium, Iran, and Rwanda.(Citation: Symantec Strider Blog)(Citation:…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • BlackOasis
    The MITRE Corporation Confidence 100 1 MITRE

    [BlackOasis](https://attack.mitre.org/groups/G0063) is a Middle Eastern threat group that is believed to be a customer of Gamma Group. The group has shown interest in prominent figures in the United…

    First seen 01/01/1970 · Last seen 16/11/5138 ·