PHANTOM
APT Intelligence Platform
MITRE LIVE
OTX: CONNECTED
116 ACTORS
THREAT ACTORS116 / 116
Indrik Spider
HIGH
Evil Corp / Manatee Tempest / DEV-0243 / UNC2165
🇷🇺 RUSSIA
LuminousMoth
HIGH
🇨🇳 CHINA
Wizard Spider
HIGH
UNC1878 / TEMP.MixMaster / Grim Spider / FIN12 / GOLD BLACKBURN / ITG23 / Periwinkle Tempest / DEV-0193 / Pistachio Tempest / DEV-0237
🇷🇺 RUSSIA
Elderwood
HIGH
Elderwood Gang / Beijing Group / Sneaky Panda
🇨🇳 CHINA
UNC3886
HIGH
🇨🇳 CHINA
Star Blizzard
HIGH
SEABORGIUM / Callisto Group / TA446 / COLDRIVER
🇷🇺 RUSSIA
Dragonfly
HIGH
TEMP.Isotope / DYMALLOY / Berserk Bear / TG-4192 / Crouching Yeti / IRON LIBERTY / Energetic Bear / Ghost Blizzard / BROMINE
🇨🇳 CHINA
OilRig
HIGH
COBALT GYPSY / IRN2 / APT34 / Helix Kitten / Evasive Serpens / Hazel Sandstorm / EUROPIUM / ITG13 / Earth Simnavaz / Crambus / TA452
🇨🇳 CHINA
Aquatic Panda
HIGH
🇨🇳 CHINA
Daggerfly
HIGH
Evasive Panda / BRONZE HIGHLAND
🇨🇳 CHINA
Inception
HIGH
Inception Framework / Cloud Atlas
🇷🇺 RUSSIA
admin@338
HIGH
🇨🇳 CHINA
BlackTech
HIGH
Palmerworm
🇨🇳 CHINA
Earth Lusca
HIGH
TAG-22 / Charcoal Typhoon / CHROMIUM / ControlX
🇨🇳 CHINA
Kimsuky
HIGH
Thallium / Velvet Chollima / Black Banshee
🇷🇺 RUSSIAGOVERNMENTDEFENSE
Play
HIGH
🇨🇳 CHINA
Suckfly
HIGH
🇨🇳 CHINA
Ember Bear
HIGH
UNC2589 / Bleeding Bear / DEV-0586 / Cadet Blizzard / Frozenvista / UAC-0056
🇷🇺 RUSSIA
FIN6
HIGH
Magecart Group 6 / ITG08 / Skeleton Spider / TAAL / Camouflage Tempest
🇨🇳 CHINA
Silence
HIGH
Whisper Spider
🇷🇺 RUSSIA
Patchwork
HIGH
Hangover Group / Dropping Elephant / Chinastrats / MONSOON / Operation Hangover
🇨🇳 CHINA
Aoqin Dragon
HIGH
🇨🇳 CHINA
Cinnamon Tempest
HIGH
DEV-0401 / Emperor Dragonfly / BRONZE STARLIGHT
🇨🇳 CHINA
Ke3chang
HIGH
APT15 / Mirage / Vixen Panda / GREF / Playful Dragon / RoyalAPT / NICKEL / Nylon Typhoon
🇨🇳 CHINA
Andariel
HIGH
Silent Chollima / PLUTONIUM / Onyx Sleet
🇰🇵 N.KOREA
HAFNIUM
HIGH
Operation Exchange Marauder / Silk Typhoon
🇨🇳 CHINA
APT38
HIGH
NICKEL GLADSTONE / BeagleBoyz / Bluenoroff / Stardust Chollima / Sapphire Sleet / COPERNICIUM
🇰🇵 N.KOREA
BRONZE BUTLER
HIGH
REDBALDKNIGHT / Tick
🇨🇳 CHINA
POLONIUM
HIGH
Plaid Rain
🇨🇳 CHINA
APT5
HIGH
Mulberry Typhoon / MANGANESE / BRONZE FLEETWOOD / Keyhole Panda / UNC2630
🇨🇳 CHINA
Leviathan
HIGH
MUDCARP / Kryptonite Panda / Gadolinium / BRONZE MOHAWK / TEMP.Jumper / APT40 / TEMP.Periscope / Gingham Typhoon
🇨🇳 CHINA
Mustang Panda
HIGH
TA416 / RedDelta / BRONZE PRESIDENT / STATELY TAURUS / FIREANT / CAMARO DRAGON / EARTH PRETA / HIVE0154 / TWILL TYPHOON / TANTALUM / LUMINOUS MOTH / UNC6384 / TEMP.Hex / Red Lich / ClumsyToad
🇨🇳 CHINA
Chimera
HIGH
🇨🇳 CHINA
BITTER
HIGH
T-APT-17
🇨🇳 CHINA
RTM
HIGH
🇷🇺 RUSSIA
menuPass
HIGH
Cicada / POTASSIUM / Stone Panda / APT10 / Red Apollo / CVNX / HOGFISH / BRONZE RIVERSIDE
🇨🇳 CHINA
Operation Wocao
HIGH
🇨🇳 CHINA
APT19
HIGH
Codoso / C0d0so0 / Codoso Team / Sunshop Group
🇨🇳 CHINA
Night Dragon
HIGH
🇨🇳 CHINA
MirrorFace
HIGH
Earth Kasha
🇨🇳 CHINA
APT37
HIGH
InkySquid / ScarCruft / Reaper / Group123 / TEMP.Reaper / Ricochet Chollima
🇨🇳 CHINA
PLATINUM
HIGH
🇨🇳 CHINA
GALLIUM
HIGH
Granite Typhoon
🇨🇳 CHINA
Winnti Group
HIGH
Blackfly
🇨🇳 CHINA
Rocke
HIGH
🇨🇳 CHINA
RedEcho
HIGH
🇨🇳 CHINA
Saint Bear
HIGH
Storm-0587 / TA471 / UAC-0056 / Lorec53
🇷🇺 RUSSIA
RedCurl
HIGH
🇷🇺 RUSSIA
Contagious Interview
HIGH
DeceptiveDevelopment / Gwisin Gang / Tenacious Pungsan / DEV#POPPER / PurpleBravo / TAG-121
🇰🇵 N.KOREA
Gorgon Group
HIGH
🇷🇺 RUSSIA
Sidewinder
HIGH
T-APT-04 / Rattlesnake
🇨🇳 CHINA
Higaisa
HIGH
🇨🇳 CHINA
APT30
HIGH
🇨🇳 CHINA
Threat Group-3390
HIGH
Earth Smilodon / TG-3390 / Emissary Panda / BRONZE UNION / APT27 / Iron Tiger / LuckyMouse / Linen Typhoon
🇨🇳 CHINA
Salt Typhoon
HIGH
🇨🇳 CHINA
Tonto Team
HIGH
Earth Akhlut / BRONZE HUNTLEY / CactusPete / Karma Panda
🇨🇳 CHINA
Gamaredon Group
HIGH
IRON TILDEN / Primitive Bear / ACTINIUM / Armageddon / Shuckworm / DEV-0157 / Aqua Blizzard / NastyShrew
🇷🇺 RUSSIA
Moonstone Sleet
HIGH
Storm-1789
🇰🇵 N.KOREA
Axiom
HIGH
Group 72
🇨🇳 CHINA
Nomadic Octopus
HIGH
DustSquad
🇷🇺 RUSSIA
APT12
HIGH
IXESHE / DynCalc / Numbered Panda / DNSCALC
🇨🇳 CHINA
APT3
HIGH
Gothic Panda / Pirpi / UPS Team / Buckeye / Threat Group-0110 / TG-0110
🇨🇳 CHINA
Putter Panda
HIGH
APT2 / MSUpdater
🇨🇳 CHINA
TA459
HIGH
🇨🇳 CHINA
ZIRCONIUM
HIGH
APT31 / Violet Typhoon
🇨🇳 CHINA
APT1
HIGH
Comment Crew / Comment Panda
🇨🇳 CHINAAEROSPACEDEFENSE
Naikon
HIGH
🇨🇳 CHINA
Mofang
HIGH
🇨🇳 CHINA
Machete
HIGH
APT-C-43 / El Machete
🇷🇺 RUSSIA
FIN5
HIGH
🇷🇺 RUSSIA
Winter Vivern
HIGH
TA473 / UAC-0114
🇷🇺 RUSSIA
APT33
HIGH
Elfin / Refined Kitten / Holmium
🇮🇷 IRANAVIATIONENERGY
Lotus Blossom
HIGH
DRAGONFISH / Spring Dragon / RADIUM / Raspberry Typhoon / Bilbug / Thrip
🇨🇳 CHINA
Sharpshooter
HIGH
🇰🇵 N.KOREA
TEMP.Veles
HIGH
XENOTIME
🇷🇺 RUSSIA
DarkHydrus
HIGH
🇨🇳 CHINA
APT18
HIGH
TG-0416 / Dynamite Panda / Threat Group-0416
🇨🇳 CHINA
Deep Panda
HIGH
Shell Crew / WebMasters / KungFu Kittens / PinkPanther / Black Vine
🇨🇳 CHINA
PittyTiger
HIGH
🇨🇳 CHINA
APT17
HIGH
Deputy Dog
🇨🇳 CHINA
Water Galura
HIGH
GOLD FEATHER
🇷🇺 RUSSIA
IndigoZebra
HIGH
🇨🇳 CHINA
Strider
HIGH
ProjectSauron
🇨🇳 CHINA
AppleJeus
HIGH
Gleaming Pisces / Citrine Sleet / UNC1720 / UNC4736
🇰🇵 N.KOREA
Scarlet Mimic
HIGH
🇨🇳 CHINA
APT16
HIGH
🇨🇳 CHINA
Moafee
HIGH
🇨🇳 CHINA
DragonOK
HIGH
🇨🇳 CHINA
FIN7
MED
GOLD NIAGARA / ITG14 / Carbon Spider / ELBRUS / Sangria Tempest
🇺🇸 USA
Fox Kitten
MED
UNC757 / Parisite / Pioneer Kitten / RUBIDIUM / Lemon Sandstorm
🇮🇷 IRAN
APT42
MED
🇮🇷 IRAN
HEXANE
MED
Lyceum / Siamesekitten / Spirlin
🇮🇷 IRAN
Leafminer
MED
Raspite
🇮🇷 IRAN
Magic Hound
MED
TA453 / COBALT ILLUSION / Charming Kitten / ITG18 / Phosphorus / Newscaster / APT35 / Mint Sandstorm
🇮🇷 IRAN
APT39
MED
ITG07 / Chafer / Remix Kitten
🇮🇷 IRAN
MuddyWater
MED
Earth Vetala / MERCURY / Static Kitten / Seedworm / TEMP.Zagros / Mango Sandstorm / TA450 / MuddyKrill
🇮🇷 IRAN
Ajax Security Team
MED
Operation Woolen-Goldfish / AjaxTM / Rocket Kitten / Flying Kitten / Operation Saffron Rose
🇮🇷 IRAN
Moses Staff
MED
DEV-0500 / Marigold Sandstorm
🇮🇷 IRAN
Molerats
MED
Operation Molerats / Gaza Cybergang
🇺🇸 USA
VOID MANTICORE
MED
COBALT MYSTIQUE / Handala Hack / Homeland Justice / Karma / Karmabelow80 / BANISHED KITTEN / Red Sandstorm
🇮🇷 IRAN
Group5
MED
🇮🇷 IRAN
CURIUM
MED
Crimson Sandstorm / TA456 / Tortoise Shell / Yellow Liderc
🇮🇷 IRAN
Agrius
MED
Pink Sandstorm / AMERICIUM / Agonizing Serpens / BlackShadow
🇮🇷 IRAN
Dust Storm
MED
🇺🇸 USA
Cleaver
MED
Threat Group 2889 / TG-2889
🇮🇷 IRAN
Silent Librarian
MED
TA407 / COBALT DICKENS
🇮🇷 IRAN
Orangeworm
MED
🇺🇸 USA
CopyKittens
MED
🇮🇷 IRAN
Ferocious Kitten
MED
🇮🇷 IRAN
Lazarus Group
CRIT
HIDDEN COBRA / Guardians of Peace / Zinc
🇰🇵 N.KOREAFINANCECRYPTOCURRENCY
Sandworm Team
CRIT
Voodoo Bear / BlackEnergy / IRIDIUM
🇷🇺 RUSSIAENERGYGOVERNMENT
Turla
CRIT
Snake / Uroburos / Venomous Bear / Waterbug
🇷🇺 RUSSIAGOVERNMENTMILITARY
APT28
CRIT
Fancy Bear / Sofacy / Strontium
🇷🇺 RUSSIAGOVERNMENTMILITARY
Volt Typhoon
CRIT
Bronze Silhouette / Vanguard Panda / Dev-0391
🇨🇳 CHINACRITICAL INFRASTRUCTUREUTILITIES
APT29
CRIT
Cozy Bear / Midnight Blizzard / NOBELIUM
🇨🇳 CHINAGOVERNMENTHEALTHCARE
APT41
CRIT
Double Dragon / Winnti / Barium / Wicked Panda
🇨🇳 CHINAHEALTHCARETELECOM
Origin Attribution Map
China (66)Russia (21)N. Korea (7)Iran (18)USA (4)

SELECT A THREAT ACTOR TO INVESTIGATE

Live IOC FeedOTX LIVE
domain
file.name
— OTX
domain
akamaicloud.com
— OTX
domain
event.name
— OTX
hash
23c2569a65870a9e412d98d5b3bdc554
— OTX
hash
75a46b23825ce7aa4ca297d93450f4e2
— OTX
hash
09bb7e568e573497e22bfa3f36d71fe9d104899826608affedb25d988f391c85
— OTX
hash
2fa6fc2199d3be55e240500d87e4484f39b9315bf336be25434f6716b8d28ec8
— OTX
hash
883d5d4a73b0ac8cf4f78fe46d8f4e76e21508872836f2b439af2de4a205128e
— OTX
domain
duemineral.uk
— OTX
domain
kali365.xyz
— OTX
hash
7c1f99dca8e5a7897892f9d224a6495023a2cfd2671697d229d355978c415ed2
— OTX
other
CVE-2026-5426
— OTX
other
CVE-2013-6282
— OTX
domain
shenmeapp.info
— OTX
domain
superflashlight.mobi
— OTX
domain
applight.mobi
— OTX
domain
jaxfire.mobi
— OTX
domain
flipboxstudio.info
— OTX
url
https://flipboxstudio.info/payload
— OTX
url
https://flipboxstudio.info/exfil
— OTX
hash
710a9d2653c8bd3689e451778dab9daec0de4c4c75f900788ccf23ef254b122a
— OTX
other
CVE-2025-33073
— OTX
other
CVE-2024-2012
— OTX
other
CVE-2025-20333
— OTX
other
CVE-2025-20362
— OTX
Actor Activity by Nation
🇨🇳 China66 actors
🇷🇺 Russia21 actors
🇮🇷 Iran18 actors
🇰🇵 N. Korea7 actors
🇺🇸 USA4 actors
Recent ActivityOTX LIVE
RemotePE: The Lazarus RAT that lives in memory
AlienVault—2026-05-25↗
Token Bingo: Don't Let Your Code be the Winner
AlienVault—2026-04-25↗
Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability
AlienVault—2026-05-25↗
Android Trojan Abuses Commercial Rooting Tool and Steals Private Information
AlienVault—2026-05-23↗
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
AlienVault—2026-05-23↗
From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
AlienVault—2026-05-22↗
Fast and Furious - Nimbus Manticore Operations During the Iranian Conflict
AlienVault—2026-05-25↗
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
AlienVault—2026-05-22↗
Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload
AlienVault—2026-05-22↗
AMOS Stealer delivered via Cursor AI agent session
AlienVault—2026-04-25↗