CyberSecurityBoardThreat Intel · CVEs · Products

Category: Attack Groups

MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.

Attack Groups

Threat Group-3390

[Threat Group-3390](https://attack.mitre.org/groups/G0027) is a Chinese threat group that has extensively used strategic Web compromises to target victims.(Citation: Dell TG-3390) The group has…

APT27 BRONZE UNION Earth Smilodon Emissary Panda
October 15, 2025
Attack Groups

APT41

[APT41](https://attack.mitre.org/groups/G0096) is a threat group that researchers have assessed as Chinese state-sponsored espionage group that also conducts financially-motivated operations. Active since at…

APT41 BARIUM Brass Typhoon G0096
June 11, 2025
Attack Groups

Earth Lusca

[Earth Lusca](https://attack.mitre.org/groups/G1006) is a suspected China-based cyber espionage group that has been active since at least April 2019. [Earth Lusca](https://attack.mitre.org/groups/G1006) has targeted…

Charcoal Typhoon CHROMIUM ControlX Earth Lusca
June 6, 2025
Attack Groups

Ember Bear

[Ember Bear](https://attack.mitre.org/groups/G1003) is a Russian state-sponsored cyber espionage group that has been active since at least 2020, linked to Russia's General Staff…

Bleeding Bear Cadet Blizzard DEV-0586 Ember Bear
April 25, 2025
Attack Groups

BlackTech

[BlackTech](https://attack.mitre.org/groups/G0098) is a suspected Chinese cyber espionage group that has primarily targeted organizations in East Asia--particularly Taiwan, Japan, and Hong Kong--and the…

BlackTech G0098 Palmerworm
April 25, 2025
Attack Groups

NEODYMIUM

[NEODYMIUM](https://attack.mitre.org/groups/G0055) is an activity group that conducted a campaign in May 2016 and has heavily targeted Turkish victims. The group has demonstrated…

G0055 NEODYMIUM
April 25, 2025
Attack Groups

Moafee

[Moafee](https://attack.mitre.org/groups/G0002) is a threat group that appears to operate from the Guandong Province of China. Due to overlapping TTPs, including similar custom…

G0002 Moafee
April 25, 2025
Attack Groups

Scarlet Mimic

[Scarlet Mimic](https://attack.mitre.org/groups/G0029) is a threat group that has targeted minority rights activists. This group has not been directly linked to a government…

G0029 Scarlet Mimic
April 25, 2025
Attack Groups

Strider

[Strider](https://attack.mitre.org/groups/G0041) is a threat group that has been active since at least 2011 and has targeted victims in Russia, China, Sweden, Belgium,…

G0041 ProjectSauron Strider
April 25, 2025
Attack Groups

IndigoZebra

[IndigoZebra](https://attack.mitre.org/groups/G0136) is a suspected Chinese cyber espionage group that has been targeting Central Asian governments since at least 2014.(Citation: HackerNews IndigoZebra July…

G0136 IndigoZebra
April 25, 2025