Nation-State Actors 54 articles

Summary APT33 is an advanced persistent threat group believed to be linked to Iran, known for conducting cyber espionage and disruptive attacks primarily targeting aerospace, energy, and critical infrastructure sectors.…

Summary APT34, also known as OilRig, is a threat actor group believed to be linked to Iran, primarily targeting organizations in the Middle East. The group is known for conducting…

Summary APT35, also known as Charming Kitten, is a threat actor group believed to be linked to Iran. It is known for conducting cyber espionage and information theft campaigns targeting…

Summary APT37, also known as Reaper or ScarCruft, is a North Korean state-sponsored advanced persistent threat group primarily targeting South Korea and other countries. The group is known for conducting…

Summary APT38 is a financially motivated advanced persistent threat group attributed to North Korea, known for conducting sophisticated cyberattacks targeting global financial institutions. The group specializes in cyber heists, using…

Summary APT40 is a state-sponsored advanced persistent threat group believed to be associated with China, known for conducting cyber espionage campaigns targeting government, military, academic, and industrial sectors primarily in…

Summary APT41 is a sophisticated and financially motivated advanced persistent threat group known for conducting cyber espionage and cybercrime operations. The group targets a wide range of industries globally, including…

Summary APT42 is a sophisticated advanced persistent threat group known for conducting targeted application attacks primarily against government, defense, and critical infrastructure sectors. The group employs a range of tactics…

Summary APT5 is a sophisticated advanced persistent threat group known for conducting targeted cyber espionage campaigns primarily against government, military, and industrial sectors. The group employs a variety of application-layer…

Summary APT6 is a sophisticated advanced persistent threat group known for conducting targeted cyber espionage and application-level attacks primarily against government, defense, and technology sectors. The group employs a range…

Summary APT7 is an advanced persistent threat group known for conducting targeted cyber espionage campaigns primarily against government, military, and industrial sectors. The group employs sophisticated application-layer attacks to infiltrate…

Summary APT8 is an advanced persistent threat group known for conducting targeted cyber espionage and application attacks against government, military, and private sector organizations. The group employs sophisticated techniques to…

Summary BlueNoroff is a sophisticated cybercrime group known for conducting targeted financial cyberattacks, primarily focusing on banks and financial institutions worldwide. The group employs advanced social engineering, spear-phishing, and malware…

Summary Bronze Butler is a sophisticated cyber espionage group known for targeting organizations primarily in Japan and other parts of Asia. The group employs advanced application-level attacks, including custom malware…

Summary Charming Kitten is an Iranian state-sponsored cyber espionage group known for conducting targeted application attacks, particularly phishing campaigns aimed at stealing credentials and sensitive information from individuals and organizations.…

Summary Cobalt Strike state operators are specialized commands within the Cobalt Strike framework used by threat actors to manage and manipulate the state of compromised systems during post-exploitation activities. These…

Summary Comment Crew, also known as APT1, is a prolific Chinese cyber espionage group linked to the People's Liberation Army. The group is known for conducting targeted application attacks, including…

Summary Dark Caracal is a cyber espionage group known for conducting targeted surveillance and data theft campaigns primarily through mobile malware. Active since at least 2015, the group has targeted…

Summary DarkHydrus is a cyber espionage group known for targeting government, diplomatic, and educational institutions primarily in the Middle East and North Africa. The group employs spear-phishing campaigns and custom…

Summary Dragonfly is a sophisticated cyber-espionage group known for targeting critical infrastructure, particularly in the energy sector. The group employs advanced application-layer attacks to gain access to industrial control systems…