216.73.217.98

Intrusion sets

APT groups and intrusion sets — goals, aliases, sectors, and related campaigns.

  • IndigoZebra
    The MITRE Corporation Confidence 100 7 MITREs 3 Malwares

    [IndigoZebra](https://attack.mitre.org/groups/G0136) is a suspected Chinese cyber espionage group that has been targeting Central Asian governments since at least 2014.(Citation: HackerNews IndigoZebra July 2021)(Citation: Checkpoint IndigoZebra July 2021)(Citation: Securelist…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Water Galura GOLD FEATHER
    The MITRE Corporation Confidence 100 3 MITREs 1 Malware 1 Tool

    [Water Galura](https://attack.mitre.org/groups/G1050) are the operators of the [Qilin](https://attack.mitre.org/software/S1242) Ransomware-as-a-Service (RaaS) who handle payload generation, ransom negotiations, and the publication of stolen data for [Qilin](https://attack.mitre.org/software/S1242) affilates recruited on Russian…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • PittyTiger
    The MITRE Corporation Confidence 100 2 MITREs 3 Malwares 2 Tools

    [PittyTiger](https://attack.mitre.org/groups/G0011) is a threat group believed to operate out of China that uses multiple different types of malware to maintain command and control.(Citation: Bizeul 2014)(Citation: Villeneuve 2014)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • APT17 Deputy Dog
    The MITRE Corporation Confidence 100 2 MITREs 1 Malware

    [APT17](https://attack.mitre.org/groups/G0025) is a China-based threat group that has conducted network intrusions against U.S. government entities, the defense industry, law firms, information technology companies, mining companies, and non-government organizations.…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Ferocious Kitten
    The MITRE Corporation Confidence 100 6 MITREs 1 Malware 1 Tool

    [Ferocious Kitten](https://attack.mitre.org/groups/G0137) is a threat group that has primarily targeted Persian-speaking individuals in Iran since at least 2015.(Citation: Kaspersky Ferocious Kitten Jun 2021)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • GCMAN
    The MITRE Corporation Confidence 100 2 MITREs

    [GCMAN](https://attack.mitre.org/groups/G0036) is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services. (Citation: Securelist GCMAN)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • PROMETHIUM StrongPity
    The MITRE Corporation Confidence 100 26 MITREs 2 Malwares 4 IOCs 1 Campaign

    [PROMETHIUM](https://attack.mitre.org/groups/G0056) is an activity group focused on espionage that has been active since at least 2012. The group has conducted operations globally with a heavy emphasis on Turkish…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Star Blizzard SEABORGIUMCallisto Group
    The MITRE Corporation Confidence 100 52 MITREs 6 Malwares 46 IOCs

    [Star Blizzard](https://attack.mitre.org/groups/G1033) is a cyber espionage and influence group originating in Russia that has been active since at least 2019. [Star Blizzard](https://attack.mitre.org/groups/G1033) campaigns align closely with Russian state…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • CopyKittens
    The MITRE Corporation Confidence 100 8 MITREs 3 Malwares 1 Tool

    [CopyKittens](https://attack.mitre.org/groups/G0052) is an Iranian cyber espionage group that has been operating since at least 2013. It has targeted countries including Israel, Saudi Arabia, Turkey, the U.S., Jordan, and…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • MoustachedBouncer
    The MITRE Corporation Confidence 100 9 MITREs 3 Malwares

    [MoustachedBouncer](https://attack.mitre.org/groups/G1019) is a cyberespionage group that has been active since at least 2014 targeting foreign embassies in Belarus.(Citation: MoustachedBouncer ESET August 2023)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Gallmaker
    The MITRE Corporation Confidence 100 6 MITREs

    [Gallmaker](https://attack.mitre.org/groups/G0084) is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017. The group has mainly targeted victims…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Poseidon Group
    The MITRE Corporation Confidence 100 8 MITREs

    [Poseidon Group](https://attack.mitre.org/groups/G0033) is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using information exfiltrated from victims to blackmail…

    First seen 01/01/1970 · Last seen 16/11/5138 ·