Skip to content
Security matters
Security matters
  • APTs
  • Tijdlijn
  • Kill chain
  • Uitgelicht
  • Privacy
Security matters

APTs

APTSuspectedAssociated groupsAssociated malware
APT41ChinaWicked Panda, Brass Typhoon, BARIUM
APT40ChinaBADSIGN, FIELDGOAL, FINDLOCK, PHOTO, SCANBOX, SOGU, WIDETONE
APT39IranITG07, Chafer, Remix KittenSEAWEED, CACHEMONEY, POWBAT
APT38North KoreaNICKEL GLADSTONE, BeagleBoyz, Bluenoroff, Stardust Chollima, Sapphire Sleet, COPERNICIUM
APT37North KoreaInkySquid, ScarCruft, Reaper, Group123, TEMP.Reaper, Ricochet Chollima
APT36
APT35ASPXSHELLSV, BROKEYOLK, PUPYRAT, TUNNA, MANGOPUNCH, DRUBOT, HOUSEBLEND
APT34IranPOWBAT, POWRUNER, BONDUPDATER
APT33IranHOLMIUM, Elfin, Peach SandstormSHAPESHIFT, DROPSHOT, TURNEDUP, NANOCORE, NETWIRE, ALFA Shell
APT32VietnamSeaLotus, OceanLotus, APT-C-00, Canvas Cyclone, BISMUTHSOUNDBITE, WINDSHIELD, PHOREAL, BEACON, KOMPROGO
APT31ChinaSOGU, LUCKYBIRD, SLOWGYRO, DUCKFAT
APT30ChinaSHIPSHAPE, SPACESHIP, FLASHFLOOD
APT29RussiaIRON RITUAL, IRON HEMLOCK, NobleBaron, Dark Halo, StellarParticle, NOBELIUM, UNC2452, YTTRIUM, The Dukes, Cozy Bear, CozyDuke, SolarStorm, Blue Kitsune, UNC3524, Midnight Blizzard
APT28RussiaIRON TWILIGHT, SNAKEMACKEREL, Swallowtail, Group 74, Sednit, Sofacy, Pawn Storm, Fancy Bear, STRONTIUM, Tsar Team, Threat Group-4127, TG-4127, Forest Blizzard, FROZENLAKECHOPSTICK, SOURFACE
APT27ChinaPANDORA, SOGU, ZXSHELL, GHOST, WIDEBERTH, QUICKPULSE, FLOWERPOT
APT26ChinaSOGU, HTRAN, POSTSIZE, TWOCHAINS, BEACON
APT25ChinaUncool, Vixen Panda, Ke3chang, Sushi Roll, Tor LINGBO, PLAYWORK, MADWOFL, MIRAGE, TOUGHROW, TOYSNAKE, SABERTOOTH
APT24ChinaPittyTigerPITTYTIGER, ENFAL, TAIDOOR
APT23ChinaNONGMIN
APT22ChinaBaristaPISCES, SOGU, FLATNOTE, ANGRYBELL, BASELESS, SEAWOLF, LOGJAM
APT21ChinaZhenbaoSOGU, TEMPFUN, Gh0st, TRAVELNET, HOMEUNIX, ZEROTWO
APT20ChinaTwivyQIAC, SOGU, Gh0st, ZXSHELL, Poison Ivy, BEACON, HOMEUNIX, STEW
APT19ChinaCodoso, C0d0so0, Codoso Team, Sunshop GroupBEACON, COBALTSTRIKE
APT18ChinaWekby, TG-0416, Dynamite Panda, Threat Group-0416Gh0st RAT
APT17ChinaTailgator Team, Deputy DogBLACKCOFFEE
APT16ChinaIRONHALO, ELMER
APT15ChinaENFAL, BALDEAGLE, NOISEMAKER, MIRAGE
APT14ChinaGh0st, POISONIVY, CLUBSEAT, GROOVY
APT12ChinaCalc Team, IXESHE, DynCalc, Numbered Panda, DNSCALCRIPTIDE, HIGHTIDE, THREBYTE, WATERSPOUT
APT10ChinaMenupass TeamHAYMAKER, SNUGRIDE, BUGJUICE, QUASARRAT
APT9ChinaSOGU, HOMEUNIX, PHOTO, FUNRUN, Gh0st, ZXSHEL
APT8ChinaHASH, FLYZAP, GOLFPRO, SAFEPUTT
APT7ChinaDIGDUG, TRACKS
APT6ChinaBELUGA, EXCHAIN, PUPTENT
APT5ChinaMulberry Typhoon, MANGANESE, BRONZE FLEETWOOD, Keyhole Panda, UNC2630BRIGHTCREST, SWEETCOLA, SPIRITBOX, PALEJAB, WIDERIM, WINVAULT, HAPPYSAD, BIRDWORLD, FARCRY, CYFREE, FULLSILO, HELLOTHEWORLD, HAZELNUT, GIF89A, SCREENBIND, SHINYFUR, TRUCKBED, LEOUNCIA, FREESWIM, PULLTAB, HIREDHELP, NEDDYHORSE, PITCHFORK, BRIGHTCOMB, ENCORE, TABCTENG, SHORTLEASH, CLEANACT, BRIGHTCYAN, DANCEPARTY, HALFBACK, PUSHBACK, COOLWHIP, LOWBID, TIGHTROPE, DIRTYWORD, AURIGA, KEYFANG, Poison Ivy
APT4ChinaMaverick Panda, Sykipot Group, WispGETKYS, LIFESAVER, CCHIP, SHYLILT, SWEETTOOTH, PHOTO, SOGO
APT3ChinaGothic Panda, Pirpi, UPS Team, Buckeye, Threat Group-0110, TG-0110SHOTPUT, COOKIECUTTER, SOGU
APT2ChinaMOOSE, WARP
APT1ChinaUnit 61398, Comment Crew, Comment Group, Comment PandaTROJAN.ECLTYS, BACKDOOR.BARKIOFORK, BACKDOOR.WAKEMINAP, TROJAN.DOWNBOT, BACKDOOR.DALBOT, BACKDOOR.REVIRD, TROJAN.BADNAME, BACKDOOR.WUALESS
Advanced Persistent Threats as described by https://www.mandiant.com/resources/insights/apt-groups and Groups | MITRE ATT&CKĀ®

2020 2023 2024 2025 2026 China Iran North Korea Russia ShinyHunters

©2026 Security matters | WordPress Theme by SuperbThemes