Threat Actor Profiles
Entities actively targeting Saudi Arabia and the GCC.
Score: 10/10
SANDWORM
Also known as: APT34, G0034, VOODOO BEAR, GRU Unit 74455, Unit 26165, ELECTRUM
Primary Targets
Known TTPs
Score: 10/10
WIZARD SPIDER
Also known as: G0102, UNC1878, TrickBot operators, Conti Gang, Evil Corp
Primary Targets
Known TTPs
Score: 10/10
SALT TYPHOON
Also known as: G0135, UNC3753, BLACKTECH
Primary Targets
Known TTPs
Score: 10/10
CHARCOAL TYPHOON
Also known as: APT44, G0118, DevCat, BRONZE DEVCAT
Primary Targets
Known TTPs
Score: 10/10
LABYRINTH CHOLLIMA
Also known as: Lazarus, G0032, Hidden Cobra, ATK.Whiskeybravo
Primary Targets
Known TTPs
Score: 10/10
SAPPHIRE SLEET
Also known as: APT46, G0127, Sapphire Sleet
Primary Targets
Known TTPs
Score: 10/10
REMIX KITTEN
Also known as: APT33, G0064, Elfin, ALPHA, ORANGEWORM
Primary Targets
Known TTPs
Score: 10/10
IMPERIAL KITTEN
Also known as: G0140, UNC3672, UNC1945
Primary Targets
Known TTPs
Score: 10/10
PEACH SANDSTORM
Also known as: G0139, UNC3651, APT33 alias
Primary Targets
Known TTPs
Score: 8/10
COZY BEAR
Also known as: APT29, G0016, HAMMERTOSS, The Dukes, SVR, Midnight Blizzard
Primary Targets
Known TTPs
Score: 8/10
INDRIK SPIDER
Also known as: Evil Corp, G0100, UNC2026, Dridex operators, LockBit 2.0 affiliate
Primary Targets
Known TTPs
Score: 8/10
GOSSAMER BEAR
Also known as: Molerats, Gaza Cybergang, Operation Ababil, g0055
Primary Targets
Known TTPs
Score: 8/10
WICKED PANDA
Also known as: APT41, G0096, Axiom, WINNTI Group, Godzilla
Primary Targets
Known TTPs
Score: 8/10
STONE PANDA
Also known as: APT10, G0045, MenuPass, Deviant Panda, HAPPYMAIL
Primary Targets
Known TTPs
Score: 8/10
DEEP PANDA
Also known as: G0009, Shell Crew, APT19, Violin Panda, RIPTIDE
Primary Targets
Known TTPs
Score: 8/10
MUSTANG PANDA
Also known as: G0129, TA413, BRONZE PRESIDENT, Temp.Hex
Primary Targets
Known TTPs
Score: 8/10
VANGUARD PANDA
Also known as: Volt Typhoon, G0138, Fifth Butterfly, UNC3236
Primary Targets
Known TTPs
Score: 8/10
SILK TYPHOON
Also known as: Hafnium, G0125, TEMP.Webmail, APT0000C
Primary Targets
Known TTPs
Score: 8/10
SILENT CHOLLIMA
Also known as: Andariel, G0138, Silent Chollima Sub-unit, Andariel Group
Primary Targets
Known TTPs
Score: 8/10
FAMOUS CHOLLIMA
Also known as: Appricot, APT43, Whiskeybravo Sub-unit
Primary Targets
Known TTPs
Score: 8/10
COTTON SANDSTORM
Also known as: Neptunium, G0141, IMMORTAL CHOLLIMA alias
Primary Targets
Known TTPs
Score: 8/10
MINT SANDSTORM
Also known as: Phosphorus, G0061, TEMP.Zagros, StoneFly
Primary Targets
Known TTPs
Score: 8/10
CRIMSON SANDSTORM
Also known as: G0146, MuddyWater, MERCURY
Primary Targets
Known TTPs
Score: 6/10
FANCY BEAR
Also known as: APT28, G0007, SOFACY, Pawn Storm, GRU Unit 26165
Primary Targets
Known TTPs
Score: 6/10
VENOMOUS BEAR
Also known as: Turla, G0010, WATERBUG, KopiLuwak, Artipus
Primary Targets
Known TTPs
Score: 6/10
PRIMITIVE BEAR
Also known as: Gamaredon, G0047, SHAMAN, UAC-0010
Primary Targets
Known TTPs
Score: 6/10
EMBER BEAR
Also known as: UAC-0056, LoJax operators, Sofacy affiliate
Primary Targets
Known TTPs
Score: 6/10
STAR BLIZZARD
Also known as: SEABORGIUM, Turla affiliate, GAMBIT
Primary Targets
Known TTPs
Score: 6/10
GOTHIC PANDA
Also known as: APT3, G0022, Pirpi, UPS Team, TG-0611
Primary Targets
Known TTPs
Score: 6/10
NUMBERED PANDA
Also known as: APT12, G0014, DynCalc, Calc Team, TG-0447
Primary Targets
Known TTPs
Score: 6/10
PIRATE PANDA
Also known as: KeyBoy, G0115, APT27, HIP00
Primary Targets
Known TTPs
Score: 6/10
STARDUST CHOLLIMA
Also known as: BlueNoroff, G0133, Stardust Chollima Sub-unit, TA505 alias
Primary Targets
Known TTPs
Score: 6/10
VELVET CHOLLIMA
Also known as: Kimsuky, G0094, Kimsuky Group, Black Banshee
Primary Targets
Known TTPs
Score: 6/10
RICOCHET CHOLLIMA
Also known as: APT37, G0121, ScarCruft, Group123
Primary Targets
Known TTPs
Score: 6/10
CITRINE SLEET
Also known as: APT45, G0126, Persistent Badger
Primary Targets
Known TTPs
Score: 6/10
CHARMING KITTEN
Also known as: APT35, G0059, Newscaster, Ajax Security Team
Primary Targets
Known TTPs
Score: 6/10
PIONEER KITTEN
Also known as: G0143, UNC3681, ALPHA KITTEN
Primary Targets
Known TTPs
Score: 6/10
RANSOMHUB
Also known as: RansomHub RaaS, Knight Ransomware successor
Primary Targets
Known TTPs
Score: 6/10
DIENET
Also known as: DieNet Hacktivist, Pro-Palestinian DDoS collective
Primary Targets
Known TTPs
Score: 6/10
HANDALA
Also known as: Handala Hack Team, Pro-Iran hacktivist
Primary Targets
Known TTPs
Score: 4/10
SCATTERED SPIDER
Also known as: Octo Tempest, UNC3944, ALPHV, 0ktapus
Primary Targets
Known TTPs
Score: 4/10
MUMMY SPIDER
Also known as: Emotet, TA542, G0095, Heodo
Primary Targets
Known TTPs
Score: 4/10
BITWISE SPIDER
Also known as: LockBit, LockBit 2.0, LockBit 3.0, ALPHV variant
Primary Targets
Known TTPs
Score: 4/10
AQUATIC PANDA
Also known as: G0143, UNC2708, Aquatic
Primary Targets
Known TTPs
Score: 4/10
PLAY RANSOMWARE
Also known as: PlayCrypt, Play RaaS
Primary Targets
Known TTPs
Score: 2/10
ALPHA SPIDER
Also known as: BlackCat, ALPHV, UNC4811, AlphV
Primary Targets
Known TTPs
Score: 2/10
VICE SPIDER
Also known as: Vice Society, UNC2630, VINCE
Primary Targets
Known TTPs
Score: 2/10
CARBON SPIDER
Also known as: FIN7, G0046, Carbanak, Navigator
Primary Targets
Known TTPs
Score: 2/10
PINCHY SPIDER
Also known as: REvil, Sodinokibi, G0106, Pinchy Ransomware Group
Primary Targets
Known TTPs
Score: 2/10
DUNGEON SPIDER
Also known as: Locky malware operators, UNC2565
Primary Targets
Known TTPs
Score: 2/10
GRACEFUL SPIDER
Also known as: TA505, G0092, LCAC, Splunk researchers group
Primary Targets
Known TTPs
Score: 2/10
TRAVELING SPIDER
Also known as: Gootkit Gang, UNC2565, Traveling sales
Primary Targets
Known TTPs
Score: 2/10
RHYSIDA
Also known as: Vice Society successor, Rhysida RaaS
Primary Targets
Known TTPs
Score: 2/10
AKIRA
Also known as: Akira RaaS, Akira Ransomware Group
Primary Targets
Known TTPs