CyberSecurityBoardThreat Intel · CVEs · Products

Category: Attack Groups

MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.

Attack Groups

BlackOasis

[BlackOasis](https://attack.mitre.org/groups/G0063) is a Middle Eastern threat group that is believed to be a customer of Gamma Group. The group has shown interest…

BlackOasis G0063
April 25, 2025
Attack Groups

PittyTiger

[PittyTiger](https://attack.mitre.org/groups/G0011) is a threat group believed to operate out of China that uses multiple different types of malware to maintain command and…

G0011 PittyTiger
April 25, 2025
Attack Groups

Ferocious Kitten

[Ferocious Kitten](https://attack.mitre.org/groups/G0137) is a threat group that has primarily targeted Persian-speaking individuals in Iran since at least 2015.(Citation: Kaspersky Ferocious Kitten Jun…

Ferocious Kitten G0137
April 25, 2025
Attack Groups

GCMAN

[GCMAN](https://attack.mitre.org/groups/G0036) is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services. (Citation: Securelist GCMAN)

G0036 GCMAN
April 25, 2025
Attack Groups

Thrip

[Thrip](https://attack.mitre.org/groups/G0076) is an espionage group that has targeted satellite communications, telecoms, and defense contractor companies in the U.S. and Southeast Asia. The…

G0076 Thrip
April 25, 2025
Attack Groups

Gallmaker

[Gallmaker](https://attack.mitre.org/groups/G0084) is a cyberespionage group that has targeted victims in the Middle East and has been active since at least December 2017.…

G0084 Gallmaker
April 25, 2025
Attack Groups

Poseidon Group

[Poseidon Group](https://attack.mitre.org/groups/G0033) is a Portuguese-speaking threat group that has been active since at least 2005. The group has a history of using…

G0033 Poseidon Group
April 25, 2025
Attack Groups

The White Company

[The White Company](https://attack.mitre.org/groups/G0089) is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign…

G0089 The White Company
April 25, 2025
Attack Groups

Carbanak

[Carbanak](https://attack.mitre.org/groups/G0008) is a cybercriminal group that has used [Carbanak](https://attack.mitre.org/software/S0030) malware to target financial institutions since at least 2013. [Carbanak](https://attack.mitre.org/groups/G0008) may be linked…

Anunak Carbanak G0008
April 25, 2025
Attack Groups

Silent Librarian

[Silent Librarian](https://attack.mitre.org/groups/G0122) is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since…

COBALT DICKENS G0122 Silent Librarian TA407
April 25, 2025