Skip to content
Weekly Signal

Evidence-linked profiles

Threat Actors

Named groups and tracked identifiers found across current reporting. Aliases are normalised so related activity is easier to follow.

Attribution needs care.Profiles reflect names used by source reporting. Open the original reports before relying on attribution for an operational decision.

Highest signal 90

APT29

Also tracked as APT29, Cozy Bear, Midnight Blizzard, NOBELIUM

Reports
5
Sources
3

Defence · Energy · Financial services · Government

Open profile →

Highest signal 72

Kimsuky

Also tracked as Kimsuky

Reports
2
Sources
2

Defence · Energy · Financial services · Government

Open profile →

Highest signal 49

STORM-2945

Also tracked as STORM-2945

Reports
2
Sources
2

Defence · Financial services · Government · Healthcare

Open profile →

Highest signal 49

UNC6293

Also tracked as UNC6293

Reports
1
Sources
1

Defence · Financial services · Government · Healthcare

Open profile →

Highest signal 49

UNC7005

Also tracked as UNC7005

Reports
1
Sources
1

Defence · Financial services · Government · Healthcare

Open profile →

Highest signal 49

UNC5976

Also tracked as UNC5976

Reports
1
Sources
1

Defence · Financial services · Government · Healthcare

Open profile →

Highest signal 49

APT28

Also tracked as APT28, Fancy Bear, Forest Blizzard, Sofacy

Reports
1
Sources
1

Defence

Open profile →

Highest signal 49

APT35

Also tracked as APT35, Charming Kitten, Mint Sandstorm

Reports
1
Sources
1

Defence

Open profile →