276 aliases · 70 canonical actors
Every vendor's name for the same actor.
Microsoft labels them STORM-0558, CrowdStrike calls them CHARMING KITTEN, MITRE catalogues them as APT35 — each alias here resolves back to a single canonical actor record. Useful when one report names an actor by a label your other sources don't use.
276 names across 70 actors
| Alias | Source | Actor | Country |
|---|---|---|---|
0ktapus | Other | Scattered Spider | ?? · UnknownUnknown |
54th Research Institute | Other | PLA Unit 54466 | CN · ChinaChina |
8Baseprimary | Other | 8Base | RU · RussiaRussia |
ACTINIUM | Microsoft | Gamaredon | RU · RussiaRussia |
Affiliate 2803 | Other | 8Base | RU · RussiaRussia |
Agenda | Other | Qilin | ?? · UnknownUnknown |
Akiraprimary | Other | Akira | ?? · UnknownUnknown |
ALPHV | Other | ALPHV/BlackCat | ?? · UnknownUnknown |
ALPHV/BlackCatprimary | Other | ALPHV/BlackCat | ?? · UnknownUnknown |
Andarielprimary | MITRE | Andariel | KP · DPRKDPRK |
Anonymous Sudanprimary | Other | Anonymous Sudan | ?? · UnknownUnknown |
APT10primary | MITRE | APT10 | CN · ChinaChina |
APT28primary | MITRE | APT28 | RU · RussiaRussia |
APT29primary | MITRE | APT29 | RU · RussiaRussia |
APT3primary | MITRE | APT3 | CN · ChinaChina |
APT30 | MITRE | Naikon | CN · ChinaChina |
APT31primary | MITRE | APT31 | CN · ChinaChina |
APT33primary | MITRE | APT33 | IR · IranIran |
APT34primary | MITRE | APT34 | IR · IranIran |
APT35primary | MITRE | APT35 | IR · IranIran |
APT37primary | MITRE | APT37 | KP · DPRKDPRK |
APT38 | Mandiant | BlueNoroff | KP · DPRKDPRK |
APT39primary | MITRE | APT39 | IR · IranIran |
APT40primary | MITRE | APT40 | CN · ChinaChina |
APT41primary | MITRE | APT41 | CN · ChinaChina |
APT43 | Mandiant | Kimsuky | KP · DPRKDPRK |
APT45 | Mandiant | Andariel | KP · DPRKDPRK |
Aqua Blizzard | Microsoft | Gamaredon | RU · RussiaRussia |
Armageddon | Other | Gamaredon | RU · RussiaRussia |
Balloonfly | Other | Play | ?? · UnknownUnknown |
BANISHED KITTEN | CrowdStrike | Void Manticore | IR · IranIran |
BARIUM | Microsoft | APT41 | CN · ChinaChina |
Beijing Group | Other | Elderwood | CN · ChinaChina |
Berserk Bear | CrowdStrike | Dragonfly | RU · RussiaRussia |
Bitwise Spider | CrowdStrike | LockBit | RU · RussiaRussia |
Black Banshee | Other | Kimsuky | KP · DPRKDPRK |
Black Bastaprimary | Other | Black Basta | ?? · UnknownUnknown |
Black Vine | Other | Deep Panda | CN · ChinaChina |
BlackBasta | Other | Black Basta | ?? · UnknownUnknown |
BlackCat | Other | ALPHV/BlackCat | ?? · UnknownUnknown |
BlackEnergy Group | Other | Sandworm | RU · RussiaRussia |
BlackSuitprimary | Other | BlackSuit | ?? · UnknownUnknown |
Bleeding Bear | Other | Cadet Blizzard | RU · RussiaRussia |
BlueCharlie | Other | COLDRIVER | RU · RussiaRussia |
BlueNoroffprimary | MITRE | BlueNoroff | KP · DPRKDPRK |
Brass Typhoon | Microsoft | APT41 | CN · ChinaChina |
BRONZE MOHAWK | Other | APT40 | CN · ChinaChina |
Bronze President | Other | Mustang Panda | CN · ChinaChina |
Bronze Riverside | Other | APT10 | CN · ChinaChina |
BRONZE SILHOUETTE | Other | Volt Typhoon | CN · ChinaChina |
Bronze Vinewood | Other | APT31 | CN · ChinaChina |
Buckeye | Other | APT3 | CN · ChinaChina |
Cadet Blizzardprimary | Microsoft | Cadet Blizzard | RU · RussiaRussia |
Callisto Group | Other | COLDRIVER | RU · RussiaRussia |
Carbanak Group | Other | FIN7 | ?? · UnknownUnknown |
Carbon Spider | CrowdStrike | DarkSide | RU · RussiaRussia |
Chafer | Other | APT39 | IR · IranIran |
Charming Kitten | CrowdStrike | APT35 | IR · IranIran |
Cl0pprimary | Other | Cl0p | ?? · UnknownUnknown |
CLOP | Other | Cl0p | ?? · UnknownUnknown |
Cobalt Mystique | Other | Void Manticore | IR · IranIran |
COLDRIVERprimary | Other | COLDRIVER | RU · RussiaRussia |
Contiprimary | MITRE | Conti | RU · RussiaRussia |
COPERNICIUM | Microsoft | BlueNoroff | KP · DPRKDPRK |
Cozy Bear | CrowdStrike | APT29 | RU · RussiaRussia |
Crambus | Other | APT34 | IR · IranIran |
CVNX | Other | APT10 | CN · ChinaChina |
Cyber Av3ngers | Other | CyberAv3ngers | IR · IranIran |
CyberAv3ngersprimary | Other | CyberAv3ngers | IR · IranIran |
Cyclops | Other | RansomHub | ?? · UnknownUnknown |
DarkSideprimary | Other | DarkSide | RU · RussiaRussia |
DDoSia | Other | NoName057(16) | RU · RussiaRussia |
Deep Pandaprimary | CrowdStrike | Deep Panda | CN · ChinaChina |
DEV-0243 | Microsoft | Evil Corp | RU · RussiaRussia |
DEV-0586 | Microsoft | Cadet Blizzard | RU · RussiaRussia |
DEV-0842 | Microsoft | Void Manticore | IR · IranIran |
Diamond Sleet | Microsoft | Lazarus Group | KP · DPRKDPRK |
Doppelgangerprimary | Other | Doppelganger | RU · RussiaRussia |
Dragonbridge | Other | Spamouflage | CN · ChinaChina |
Dragonflyprimary | MITRE | Dragonfly | RU · RussiaRussia |
DYMALLOY | Other | Dragonfly | RU · RussiaRussia |
Earth Preta | Other | Mustang Panda | CN · ChinaChina |
Earth Vetala | Other | MuddyWater | IR · IranIran |
Elderwoodprimary | MITRE | Elderwood | CN · ChinaChina |
Elderwood Gang | Other | Elderwood | CN · ChinaChina |
Elfin | Other | APT33 | IR · IranIran |
Ember Bear | CrowdStrike | Cadet Blizzard | RU · RussiaRussia |
Emerald Sleet | Microsoft | Kimsuky | KP · DPRKDPRK |
Energetic Bear | Other | Dragonfly | RU · RussiaRussia |
EQGRP | Other | Equation Group | US · United StatesUnited States |
Equation Groupprimary | Other | Equation Group | US · United StatesUnited States |
Ethereal Panda | CrowdStrike | Flax Typhoon | CN · ChinaChina |
EUROPIUM | Microsoft | APT34 | IR · IranIran |
Evil Corpprimary | Other | Evil Corp | RU · RussiaRussia |
FamousSparrow | Other | Salt Typhoon | CN · ChinaChina |
Fancy Bear | CrowdStrike | APT28 | RU · RussiaRussia |
FIN11 | Mandiant | Cl0p | ?? · UnknownUnknown |
FIN7primary | Mandiant | FIN7 | ?? · UnknownUnknown |
Flax Typhoonprimary | Microsoft | Flax Typhoon | CN · ChinaChina |
Forest Blizzard | Microsoft | APT28 | RU · RussiaRussia |
Fox Kitten | Other | Pioneer Kitten | IR · IranIran |
G0009 | MITRE | Deep Panda | CN · ChinaChina |
G0088 | MITRE | XENOTIME | RU · RussiaRussia |
Gamaredonprimary | MITRE | Gamaredon | RU · RussiaRussia |
GhostEmperor | Other | Salt Typhoon | CN · ChinaChina |
Gingham Typhoon | Microsoft | APT40 | CN · ChinaChina |
Gold Southfield | Other | REvil | RU · RussiaRussia |
Gold Ulrick | Other | Conti | RU · RussiaRussia |
Gonjeshke Darande | Other | Predatory Sparrow | IL · IsraelIsrael |
Gothic Panda | CrowdStrike | APT3 | CN · ChinaChina |
Greenbottle | Other | RansomHub | ?? · UnknownUnknown |
GTG-1002primary | Other | GTG-1002 | CN · ChinaChina |
Hafniumprimary | Microsoft | Hafnium | CN · ChinaChina |
HaiEnergy | Other | Spamouflage | CN · ChinaChina |
Handalaprimary | Other | Handala | IR · IranIran |
Hazel Sandstorm | Microsoft | APT34 | IR · IranIran |
Helix Kitten | CrowdStrike | APT34 | IR · IranIran |
HIDDEN COBRA | Other | Lazarus Group | KP · DPRKDPRK |
Hiveprimary | Other | Hive | ?? · UnknownUnknown |
HOLMIUM | Microsoft | APT33 | IR · IranIran |
Homeland Justiceprimary | Other | Homeland Justice | IR · IranIran |
HoneyMyte | Other | Mustang Panda | CN · ChinaChina |
Howling Scorpius | Other | Akira | ?? · UnknownUnknown |
INC Ransomprimary | Other | INC Ransom | RU · RussiaRussia |
Indrik Spider | CrowdStrike | Evil Corp | RU · RussiaRussia |
InkySquid | Other | APT37 | KP · DPRKDPRK |
IRIDIUM | Microsoft | Sandworm | RU · RussiaRussia |
Iron Hunter | Other | Turla | RU · RussiaRussia |
IRON LIBERTY | Other | Dragonfly | RU · RussiaRussia |
IT Army of Ukraineprimary | Other | IT Army of Ukraine | UA · UkraineUkraine |
ITArmy | Other | IT Army of Ukraine | UA · UkraineUkraine |
ITG07 | Other | APT39 | IR · IranIran |
ITG14 | Other | FIN7 | ?? · UnknownUnknown |
Jia Tanprimary | Other | Jia Tan | ?? · UnknownUnknown |
JiaT75 | Other | Jia Tan | ?? · UnknownUnknown |
Judgment Panda | CrowdStrike | APT31 | CN · ChinaChina |
KillMilk's collective | Other | KillNet | RU · RussiaRussia |
KillNetprimary | Other | KillNet | RU · RussiaRussia |
Kimsukyprimary | MITRE | Kimsuky | KP · DPRKDPRK |
Kryptonite Panda | CrowdStrike | APT40 | CN · ChinaChina |
KungFu Kittens | Other | Deep Panda | CN · ChinaChina |
LABYRINTH CHOLLIMA | CrowdStrike | Lazarus Group | KP · DPRKDPRK |
Lazarus Groupprimary | MITRE | Lazarus Group | KP · DPRKDPRK |
Lemon Sandstorm | Microsoft | Pioneer Kitten | IR · IranIran |
Leviathan | Other | APT40 | CN · ChinaChina |
LockBitprimary | Other | LockBit | RU · RussiaRussia |
LockBit 3.0 | Other | LockBit | RU · RussiaRussia |
LockBit Black | Other | LockBit | RU · RussiaRussia |
LockBit Green | Other | LockBit | RU · RussiaRussia |
Lotus Panda | Other | Naikon | CN · ChinaChina |
Lynx (suspected fork) | Other | INC Ransom | RU · RussiaRussia |
Manatee Tempest | Microsoft | Evil Corp | RU · RussiaRussia |
Mango Sandstorm | Microsoft | MuddyWater | IR · IranIran |
MenuPass | Other | APT10 | CN · ChinaChina |
MERCURY | Microsoft | MuddyWater | IR · IranIran |
Midnight Blizzard | Microsoft | APT29 | RU · RussiaRussia |
Mint Sandstorm | Microsoft | APT35 | IR · IranIran |
Muddled Libra | Other | Scattered Spider | ?? · UnknownUnknown |
MuddyWaterprimary | MITRE | MuddyWater | IR · IranIran |
Mustang Pandaprimary | MITRE | Mustang Panda | CN · ChinaChina |
Naikonprimary | MITRE | Naikon | CN · ChinaChina |
NOBELIUM | Microsoft | APT29 | RU · RussiaRussia |
Noberus | Other | ALPHV/BlackCat | ?? · UnknownUnknown |
NoName057 | Other | NoName057(16) | RU · RussiaRussia |
NoName057(16)primary | Other | NoName057(16) | RU · RussiaRussia |
Octo Tempest | Microsoft | Scattered Spider | ?? · UnknownUnknown |
OilRig | Other | APT34 | IR · IranIran |
Onyx Sleet | Microsoft | Andariel | KP · DPRKDPRK |
Opal Sleet | Microsoft | APT37 | KP · DPRKDPRK |
Operation Zeroprimary | Other | Operation Zero | RU · RussiaRussia |
Override Panda | CrowdStrike | Naikon | CN · ChinaChina |
Parisite | Other | Pioneer Kitten | IR · IranIran |
Peach Sandstorm | Microsoft | APT33 | IR · IranIran |
PHOSPHORUS | Microsoft | APT35 | IR · IranIran |
Pinchy Spider | CrowdStrike | REvil | RU · RussiaRussia |
Pioneer Kittenprimary | CrowdStrike | Pioneer Kitten | IR · IranIran |
PLA Unit 54466primary | Other | PLA Unit 54466 | CN · ChinaChina |
Playprimary | Other | Play | ?? · UnknownUnknown |
PlayCrypt | Other | Play | ?? · UnknownUnknown |
PLUTONIUM | Microsoft | Andariel | KP · DPRKDPRK |
POTASSIUM | Microsoft | APT10 | CN · ChinaChina |
Predatory Sparrowprimary | Other | Predatory Sparrow | IL · IsraelIsrael |
Primitive Bear | CrowdStrike | Gamaredon | RU · RussiaRussia |
Qilinprimary | Other | Qilin | ?? · UnknownUnknown |
Quantum (precursor) | Other | BlackSuit | ?? · UnknownUnknown |
RansomHubprimary | Other | RansomHub | ?? · UnknownUnknown |
Reaper | Other | APT37 | KP · DPRKDPRK |
Recent Reliable News | Other | Doppelganger | RU · RussiaRussia |
Red Apollo | Other | APT10 | CN · ChinaChina |
Red Sandstorm | Microsoft | Void Manticore | IR · IranIran |
RedDelta | Other | Mustang Panda | CN · ChinaChina |
RedJuliett | Other | Flax Typhoon | CN · ChinaChina |
Refined Kitten | CrowdStrike | APT33 | IR · IranIran |
Remix Kitten | CrowdStrike | APT39 | IR · IranIran |
REvilprimary | MITRE | REvil | RU · RussiaRussia |
Ricochet Chollima | CrowdStrike | APT37 | KP · DPRKDPRK |
Roasted 0ktapus | Other | Scattered Spider | ?? · UnknownUnknown |
RomComprimary | Other | RomCom | RU · RussiaRussia |
Royal | Other | BlackSuit | ?? · UnknownUnknown |
RRN | Other | Doppelganger | RU · RussiaRussia |
RUBIDIUM | Microsoft | Pioneer Kitten | IR · IranIran |
Salt Typhoonprimary | Microsoft | Salt Typhoon | CN · ChinaChina |
Sandwormprimary | MITRE | Sandworm | RU · RussiaRussia |
Sangria Tempest | Microsoft | FIN7 | ?? · UnknownUnknown |
Sapphire Sleet | Microsoft | BlueNoroff | KP · DPRKDPRK |
ScarCruft | Other | APT37 | KP · DPRKDPRK |
Scattered Spiderprimary | CrowdStrike | Scattered Spider | ?? · UnknownUnknown |
SEABORGIUM | Microsoft | COLDRIVER | RU · RussiaRussia |
Seashell Blizzard | Microsoft | Sandworm | RU · RussiaRussia |
Secret Blizzard | Microsoft | Turla | RU · RussiaRussia |
Shell Crew | Other | Deep Panda | CN · ChinaChina |
ShinyCorp | Other | ShinyHunters | ?? · UnknownUnknown |
ShinyHuntersprimary | Other | ShinyHunters | ?? · UnknownUnknown |
Shuckworm | Other | Gamaredon | RU · RussiaRussia |
Silent Chollima | CrowdStrike | Andariel | KP · DPRKDPRK |
Silk Typhoon | Microsoft | Hafnium | CN · ChinaChina |
Snake | Other | Turla | RU · RussiaRussia |
Sneaky Panda | CrowdStrike | Elderwood | CN · ChinaChina |
Sodinokibi | Other | REvil | RU · RussiaRussia |
Sofacy | Other | APT28 | RU · RussiaRussia |
Soldiers of Solomon | Other | CyberAv3ngers | IR · IranIran |
Spamouflageprimary | Other | Spamouflage | CN · ChinaChina |
Star Blizzard | Microsoft | COLDRIVER | RU · RussiaRussia |
Stardust Chollima | CrowdStrike | BlueNoroff | KP · DPRKDPRK |
Static Kitten | CrowdStrike | MuddyWater | IR · IranIran |
Stone Panda | CrowdStrike | APT10 | CN · ChinaChina |
Stonefly | Other | Andariel | KP · DPRKDPRK |
Storm-0558primary | Microsoft | Storm-0558 | CN · ChinaChina |
Storm-0842 | Microsoft | Void Manticore | IR · IranIran |
Storm-0978 | Microsoft | RomCom | RU · RussiaRussia |
Storm-1359 | Microsoft | Anonymous Sudan | ?? · UnknownUnknown |
Storm-1376 | Microsoft | Spamouflage | CN · ChinaChina |
Storm-1811 | Microsoft | Black Basta | ?? · UnknownUnknown |
STRONTIUM | Microsoft | APT28 | RU · RussiaRussia |
TA446 | Other | COLDRIVER | RU · RussiaRussia |
TA505 | Mandiant | Cl0p | ?? · UnknownUnknown |
Taizi Flood | Other | Spamouflage | CN · ChinaChina |
TeleBots | Other | Sandworm | RU · RussiaRussia |
TEMP.Isotope | Mandiant | Dragonfly | RU · RussiaRussia |
TEMP.Periscope | Mandiant | APT40 | CN · ChinaChina |
TEMP.Veles | Mandiant | XENOTIME | RU · RussiaRussia |
TEMP.Zagros | Mandiant | MuddyWater | IR · IranIran |
TG-0110 | Other | APT3 | CN · ChinaChina |
THALLIUM | Microsoft | Kimsuky | KP · DPRKDPRK |
The Dukes | Other | APT29 | RU · RussiaRussia |
Tilded Team | Other | Equation Group | US · United StatesUnited States |
TraderTraitor | Other | BlueNoroff | KP · DPRKDPRK |
TrickBot Group | Other | Conti | RU · RussiaRussia |
Trident Ursa | Other | Gamaredon | RU · RussiaRussia |
Tropical Scorpius | Other | RomCom | RU · RussiaRussia |
Turlaprimary | MITRE | Turla | RU · RussiaRussia |
TWILL TYPHOON | Microsoft | Mustang Panda | CN · ChinaChina |
UAC-0056 | Other | Cadet Blizzard | RU · RussiaRussia |
UNC2286 | Mandiant | Salt Typhoon | CN · ChinaChina |
UNC2596 | Mandiant | RomCom | RU · RussiaRussia |
UNC2628 | Mandiant | DarkSide | RU · RussiaRussia |
UNC3944 | Mandiant | Scattered Spider | ?? · UnknownUnknown |
UNC4393 | Mandiant | Black Basta | ?? · UnknownUnknown |
UNC5537 | Mandiant | ShinyHunters | ?? · UnknownUnknown |
UNC757 | Mandiant | Pioneer Kitten | IR · IranIran |
Underground Team | Other | RomCom | RU · RussiaRussia |
UPS Team | Other | APT3 | CN · ChinaChina |
VANGUARD PANDA | CrowdStrike | Volt Typhoon | CN · ChinaChina |
Velvet Chollima | CrowdStrike | Kimsuky | KP · DPRKDPRK |
Venomous Bear | CrowdStrike | Turla | RU · RussiaRussia |
Violet Typhoon | Microsoft | APT31 | CN · ChinaChina |
Void Manticoreprimary | Other | Void Manticore | IR · IranIran |
Void Rabisu | Other | RomCom | RU · RussiaRussia |
Volt Typhoonprimary | Microsoft | Volt Typhoon | CN · ChinaChina |
Voodoo Bear | CrowdStrike | Sandworm | RU · RussiaRussia |
Waterbug | Other | Turla | RU · RussiaRussia |
WebMasters | Other | Deep Panda | CN · ChinaChina |
WICKED PANDA | CrowdStrike | APT41 | CN · ChinaChina |
Wizard Spider | CrowdStrike | Conti | RU · RussiaRussia |
XENOTIMEprimary | Other | XENOTIME | RU · RussiaRussia |
Zirconium | Microsoft | APT31 | CN · ChinaChina |