Threat Actor & APT Campaign Directory

This directory indexes 44 authoritative threat actors, APT groups, and cybercrime syndicates documented in our malware catalog. Each hub connects the adversary's geopolitical origins, tactical motivations, exploited CVEs, and observed MITRE ATT&CK techniques directly with cataloged malware binaries and active incident response guidance.

Showing 44 threat groups

Nation-State APT(10 Threat Groups)

State-sponsored cyber espionage and strategic sabotage operations operating under foreign intelligence services and military commands.

Organized Cybercrime Syndicate(19 Threat Groups)

Financially motivated threat cartels specializing in enterprise ransomware extortion, large-scale banking fraud, and corporate network infiltration.

Malware-as-a-Service Operator(10 Threat Groups)

Underground commercial syndicates developing, leasing, and staging mass malspam loaders, infostealers, and commodity initial access tools.

Historical Threat Group(5 Threat Groups)

Landmark threat actors, botnet authors, and criminal operators whose infrastructure was taken down through international law enforcement coalitions.