216.73.217.176

Intrusion sets

APT groups and intrusion sets — goals, aliases, sectors, and related campaigns.

  • Gallmaker
    The MITRE Corporation Confidence 100 6 MITREs

    [Gallmaker](https://attack.mitre.org/groups/G0084) is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017. The group has mainly targeted victims…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Poseidon Group
    The MITRE Corporation Confidence 100 8 MITREs

    [Poseidon Group](https://attack.mitre.org/groups/G0033) is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using information exfiltrated from victims to blackmail…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • LazyScripter
    The MITRE Corporation Confidence 100 20 MITREs 2 Malwares 5 Tools

    [LazyScripter](https://attack.mitre.org/groups/G0140) is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.(Citation: MalwareBytes LazyScripter Feb 2021)

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • The White Company
    The MITRE Corporation Confidence 100 7 MITREs 2 Malwares

    [The White Company](https://attack.mitre.org/groups/G0089) is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Deep Panda Shell CrewWebMasters
    The MITRE Corporation Confidence 100 10 MITREs 4 Malwares 3 Tools

    [Deep Panda](https://attack.mitre.org/groups/G0009) is a suspected Chinese threat group known to target many industries, including government, defense, financial, and telecommunications. (Citation: Alperovitch 2014) The intrusion into healthcare company Anthem…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Carbanak Anunak
    The MITRE Corporation Confidence 100 10 MITREs 1 Malware 3 Tools

    [Carbanak](https://attack.mitre.org/groups/G0008) is a cybercriminal group that has used [Carbanak](https://attack.mitre.org/software/S0030) malware to target financial institutions since at least 2013. [Carbanak](https://attack.mitre.org/groups/G0008) may be linked to groups tracked separately as [Cobalt…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Orangeworm
    The MITRE Corporation Confidence 100 2 MITREs 1 Malware 7 Tools

    [Orangeworm](https://attack.mitre.org/groups/G0071) is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015, likely for the purpose of…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • APT18 TG-0416Dynamite Panda
    The MITRE Corporation Confidence 100 12 MITREs 4 Malwares 1 Tool

    [APT18](https://attack.mitre.org/groups/G0026) is a threat group that has operated since at least 2009 and has targeted a range of industries, including technology, manufacturing, human rights groups, government, and medical.…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Silent Librarian TA407COBALT DICKENS
    The MITRE Corporation Confidence 100 13 MITREs

    [Silent Librarian](https://attack.mitre.org/groups/G0122) is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of [Silent…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • Whitefly
    The MITRE Corporation Confidence 100 9 MITREs 1 Tool

    [Whitefly](https://attack.mitre.org/groups/G0107) is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • TEMP.Veles XENOTIME
    The MITRE Corporation Confidence 100 2 MITREs 1 Malware 2 Tools 2 Campaigns

    [TEMP.Veles](https://attack.mitre.org/groups/G0088) is a Russia-based threat group that has targeted critical infrastructure. The group has been observed utilizing [TRITON](https://attack.mitre.org/software/S0609), a malware framework designed to manipulate industrial safety systems.(Citation: FireEye…

    First seen 01/01/1970 · Last seen 16/11/5138 ·
  • DarkHydrus
    The MITRE Corporation Confidence 100 7 MITREs 2 Malwares 1 Tool

    [DarkHydrus](https://attack.mitre.org/groups/G0079) is a threat group that has targeted government agencies and educational institutions in the Middle East since at least 2016. The group heavily leverages open-source tools and…

    First seen 01/01/1970 · Last seen 16/11/5138 ·