.svg?width=93&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=7&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
Filter by
Threat profiles
Explore the latest threat group definitions and profiles published by the
Sophos® Counter Threat Unit™ (CTU) Research Team.
Showing 191-197 of 197 profiles
| Name | Location | Objectives | Aliases | Tools |
|---|---|---|---|---|
 North Korea | Espionage | APT43 (Mandiant), ARCHIPELAGO (Google), Black Banshee (PWC), Crooked Pisces (Palo Alto), Emerald Sleet (Microsoft), ITG16 (IBM), Kimsuky (Kaspersky), Larva-24005 (AhnLab), Opal Sleet (Microsoft), Ruby Sleet (Microsoft), SharpTongue (Volexity), Sparking Pisces (Palo Alto), Springtail (Symantec), TA406 (Proofpoint), TA427 (Proofpoint), THALLIUM (Microsoft), UAT-5394 (Talos), Velvet Chollima (CrowdStrike) | BabyShark, FastFire, FastSpy, FireViewer, KimJongRAT, Kimsuky, KONNI, ReconShark | |
| North Korea | Financial Gain | CL-STA-0237 (Palo Alto), CL-STA-0241 (Palo Alto), DPRK IT Workers, Famous Chollima (Crowdstrike), Jasper Sleet (Microsoft), PurpleDelta (Recorded Future), Storm-0287 (Microsoft), UNC5267 (Mandiant), Wagemole (Palo Alto) | ||
 United States | Espionage | Equation Group (Kaspersky) | DoubleFantasy, EquationDrug, EquationLaser, Fanny, GrayFish, TripleFantasy | |
| United States | Espionage, Surveillance | APT-C-39 (Qihoo 360), Longhorn (Symantec), The Lamberts (Kaspersky), Vault7 (Wikileaks) | AfterMidnight, Assassin, Marble Framework | |
 Vietnam | Espionage, Surveillance | APT32 (FireEye), Cobalt Kitty, OceanLotus, WOODLAWN (SCWX CTU) | Cobalt Strike, Denis, Goopy, JEShell, KerrDown, Mimikatz, Ratsnif, Remy, Rizzo, RolandRAT | |
 South Korea | Espionage | APT-C-06 (Qihoo 360), ATK52 (Thales), CTG-1948 (SCWX CTU), DarkHotel (Kaspersky), DUBNIUM (Microsoft), Fallout Team (Fireye), Shadow Crane (CrowdStrike), Zigzag Hail (Microsoft) | Nemim, Tapaoux | |
 India | Espionage | Confucius (Palo Alto), Dropping Elephant (Kaspersky), EHDevel (BitDefender), Manul (Electronic Frontier Foundation), Monsoon (Forcepoint), Operation Hangover (Norman), Patchwork (Cymmetria), TG-4410 (SCWX CTU), Viceroy Tiger (CrowdStrike) | Enlighten Infostealer, Hanove, Mac OS X KitM Spyware, Proyecto2, YTY Backdoor |