Threat Observatory
A public encyclopedia of threat actors and malware families, built from MITRE ATT&CK, Malpedia and the Maltiverse IoC corpus: aliases, arsenal, campaigns, detection rules and live indicator activity.
Threat Actors (1,174 profiles)
Most active first — the 100 profiles with the most recent indicator activity in Maltiverse. Browse all threat actors A-Z »
ShadowParasite FusionCore Kimsuky Darkhotel Turla BRONZE BUTLER Leviathan MuddyWater Careto Predatory Sparrow RTM TeamPCP Chimera Akira Andariel Sidewinder PROMETHIUM TA551 TA570 menuPass Cinnamon Tempest TA410 OilRig Strider APT37 Silence Scattered Spider Void Arachne Lazarus Group TA558 Ghostwriter UNC6395 Transparent Tribe SideCopy Axiom APT17 RedGolf GALLIUM Ke3chang Sandworm Team BackdoorDiplomacy Gamaredon Group Naikon Void Banshee APT-C-36 APT33 TeamTNT Windshift Windigo APT38 DEV-0270 DEV-0950 The Gentlemen INC Ransom Rancor BITTER Mustang Panda Threat Group-3390 Equation The Shadow Brokers APT32 FIN7 BlackByte APT29 APT41 BlackTech Molerats APT28 Calypso Earth Lusca Carbanak Patchwork TA428 Water Gamayun ShadyPanda NoName057(16) TA505 Play UNC6619 Volatile Cedar Cobalt Group Orangeworm Common Raven Wheat Tempest Mustard Tempest Moses Staff Magic Hound TA866 DAGGER PANDA SloppyLemming ShinyHunters Evilnum CyberAv3ngers Lotus Blossom APT-C-23 RedCurl ZIRCONIUM Stealth Falcon Daggerfly HAFNIUM
Malware Families (6,272 profiles)
Most active first — the 100 profiles with the most recent indicator activity in Maltiverse. Browse all malware families A-Z »
IClickFix Cobalt Strike XLoader Proton ClearFake KongTuke CloudEyE VShell AMOS Bashlite Amadey php.shin_webshell QakBot NanoCore Python Vidar Mimikatz WarzoneRAT XWorm AsyncRAT SocGholish SmartApeSG Ghost RAT Kuaibu Solar Unknown Raven Stealer Sliver Ramnit gh0st RAT DEATHRANSOM Alien Snojan Zeus neshta Remcos Agent Tesla Azorult Emotet Graftor Monero Miner Razy Strictor Trojan Unsafe Beapy Lumma Stealer RecordBreaker ZUpdater GobRAT Nanocore RAT SombRAT Remsec FastCash Icefog Nitro Coinminer interlock NETWIRE Revenge RAT njRAT Expiro RedLine Stealer Prometei (ELF) Mozi Lokibot DCRAT Tofsee BianLian (Android) Raccoon Serpent Stealer xmrig Nitol Sakula Latrodectus QuasarRAT BlackMoon Smoke Loader StrelaStealer Qadars Meduza Stealer Crypton Ransomware Nemesis Ursnif Gozi Floxif Pony REvil Banjori Loki Password Stealer (PWS) Nymaim Simda SuppoBox Virut SUNBURST KeyBase CryptoMix SAGE Tinba Sality