Intelligence Group
Request a quote

Threat Actor Index

Live Intelligence
Structured threat actor intelligence covering techniques, malware, nation attribution and sector targeting across 176 named adversary groups.
176
Threat Groups
Browse all groups ↗
498
Techniques
View technique coverage ↗
526
Malware Families
Browse malware ↗
81
Tools Tracked
Browse tools ↗
Most Active Groups
Top 10 groups by number of documented techniques
G0094
Kimsuky
🇷🇺 Russia 130 techniques 19 software
G0007
APT28
🇷🇺 Russia 93 techniques 29 software
G0032
Lazarus Group
🇰🇵 North Korea 93 techniques 26 software
G0129
Mustang Panda
🇷🇺 Russia 85 techniques 23 software
G0096
APT41
🇨🇳 China 82 techniques 32 software
G1017
Volt Typhoon
🇨🇳 China 81 techniques 17 software
G0034
Sandworm Team
🇷🇺 Russia 79 techniques 27 software
G0050
APT32
🇻🇳 Vietnam 78 techniques 15 software
G0059
Magic Hound
🇮🇷 Iran 78 techniques 13 software
G0049
OilRig
🇮🇷 Iran 76 techniques 30 software
Browse all 176 groups ↗
Kill-Chain Tactic Coverage
Top 10 tactics by group count
Stealth
149
Execution
148
Initial Access
145
Command & Control
130
Persistence
123
Privilege Escalation
120
Resource Development
117
Discovery
113
Credential Access
96
Collection
94
Nation-State Attribution
Top 10 nations by attributed group count
Unknown
65
China
47
Russia
29
Iran
19
North Korea
6
Pakistan
3
Lebanon
2
Turkey
2
Vietnam
1
South Korea
1
Top 10 Techniques by Group Coverage
Techniques observed across the most groups
T1105 Ingress Tool Tra
88
T1204.002 Malicious Fi
86
T1059.001 PowerShell
85
T1588.002 Tool
82
T1566.001 Spearphishin
78
T1059.003 Windows Comm
73
T1036.005 Match Legiti
63
T1082 System Informati
58
T1071.001 Web Protocol
57
T1547.001 Registry Run
57
Top 10 Most Deployed Malware
Malware families appearing across the most groups
Mimikatz
51
PsExec
38
Net
33
Cobalt Strike
30
Impacket
18
Empire
17
PlugX
15
Ping
15
PoisonIvy
14
ipconfig
14
Intelligence data sourced from MITRE Enterprise CTI. Built 2026-10-11 01:30 UTC by Intelligence Group.
↑