Threat Actors APT

Threat Actors APT
H APT(180) CYBERCRIME() CLUSTER(2) HACKTIVISTS() MaaS() NATION STATE() RaaS() VISHING(1) | ABECEDNĚ | GROUP LIST | Group Records

HOME | APT GROUP | APT LIST |

DATE	NAME	INFO	CATEGORY	SUBCATE
31.8.26	Fire Ant	Fire Ant Evolves: From Hypervisors to Trusted Infrastructure	APT	APT
19.8.26	SilkParasite	SilkParasite: Tracking a China-Nexus APT Across Central Asia	APT	APT
14.8.26	Jewelbug	Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side	APT	APT
12.8.26	Head Mare	Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants	APT	APT
2.7.26	ToddyCat	ToddyCat: your hidden email assistant. Part 2	APT	APT
29.6.26	Mustang Panda	Mustang Panda targets India's government and energy sectors with ZOHOMURK and MINIRECON	APT	APT
29.6.26	Gamaredon in 2025	Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances	APT	APT
11.6.26	OceanLotus	OceanLotus: From external espionage to domestic targeting	APT	APT
14.5.26	APT ActivityApril 2025 – September 2025 Report	RUSSIA-ALIGNED APTs RAMP UP ATTACKS AGAINST UKRAINE AND ITS STRATEGIC PARTNERS	APT	APT
13.5.26	FamousSparrow	FamousSparrow APT Targets Azerbaijani Oil and Gas Industry	APT	APT
6.5.26	MuddyWater	Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware	APT	APT
4.5.26	Silver Fox	Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India	APT	APT
4.5.26	South-East Asian Military Entities Targeted via cPanel (CVE-2026-41940)	On April 29th 2026, watchTowr Labs published research on CVE-2026-41940, a critical authentication bypass in cPanel & WHM. Within days, reporting from Censys and Ctrl-Alt-Intel made clear that exploitation had rapidly moved from disclosure to in-the-wild abuse.	APT	APT
23.4.26	GopherWhisper	GopherWhisper: A burrow full of malware	APT	APT
23.4.26	Harvester	Harvester: APT Group Expands Toolset With New GoGra Linux Backdoor	APT	APT
22.4.26	Mustang Panda	Same packet, different magic: Mustang Panda hits India's banking sector and Korea geopolitics	APT	APT
14.4.26	APT37	APT37’s Pretexting-Based Targeted Intrusion: Analysis of Facebook Reconnaissance and Software Tampering Attacks	APT	APT
10.4.26	BITTER APT	Beyond BITTER: MENA Civil Society Targeted in Hack-For-Hire Operation Linked to BITTER APT	APT	APT
8.4.26	APT28	APT28 exploit routers to enable DNS hijacking operations	APT	APT
6.3.26	Dust Specter	Dust Specter APT Targets Government Officials in Iraq	APT	APT
4.3.26	Silver Dragon	Silver Dragon Targets Organizations in Southeast Asia and Europe	APT	APT
5.2.26	Amaranth-Dragon	Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia	APT	APT
3.2.26	APT28	APT28 Leverages CVE-2026-21509 in Operation Neusploit	APT	APT
28.1.26	HoneyMyte	HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns	APT	APT
17.1.26	KIMSUKI	Kimsuki, an advanced persistent threat (APT) group active since at least 2012, is suspected to be operating out of North Korea in direct support of the regime’s strategic objectives. The…	APT	APT
2.1.26	APT36	APT36 : Multi-Stage LNK Malware Campaign Targeting Indian Government Entities	APT	APT