APT
ATLAS
Atlas
Actors
147
Names
471
Sectors
40
Requirements
480
⌘K
▸
sign in
Atlas
Actors
147
Names
471
Sectors
40
Requirements
480
LOADING
Lyceum (aka Lyceum, HEXANE) · APT Atlas
Actors
/
Nation-state / APT
/
Asia
Lyceum
G0136
APT
IR · Iran
AKA
HEXANE · SiameseKitten · Spirlin
CrowdStrike
:
LYCEUM TEMPEST
Microsoft
:
Storm-0133
MITRE
:
G0136
Secureworks
:
COBALT LYCEUM
Targets
5
Sectors
8
Threat types
1
GIRs covered
0/480
Active since
2018
Pin to atlas
Watch
Share
Export
Also tracked as
4 vendor names · 3 other aliases
Open Rosetta Stone
CrowdStrike
LYCEUM TEMPEST
Microsoft
Storm-0133
MITRE
G0136
Secureworks
COBALT LYCEUM
UNATTRIBUTED ALIASES
HEXANE
SiameseKitten
Spirlin
Victimology
Geographic footprint · 5 countries
Region filter
Export
origin · Iran
targeted countries · 5
AFRICA ·
3
Egypt
·
Tunisia
·
South Africa
ASIA ·
2
Israel
·
Kuwait
Sectors targeted
8 of 40
Government
100 actors
Defense
72 actors
Aviation
22 actors
Technology
60 actors
Telecom
72 actors
Energy / Utilities
59 actors
Oil and Gas
21 actors
Education & Research
62 actors
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
ESP · Espionage
MITRE ATT&CK · 23 techniques
Reconnaissance
· 2
T1589.002
Email Addresses
T1591.004
Identify Roles
Resource Development
· 1
T1583.002
DNS Server
Execution
· 3
T1053.005
Scheduled Task
Credential Access
· 3
T1110
Brute Force
T1555
Credentials from Password Stores
Discovery
· 8
T1010
Application Window Discovery
T1016
System Network Configuration Discovery
Lateral Movement
· 2
T1021.001
Remote Desktop Protocol
T1534
Internal Spearphishing
Exfiltration
· 1
T1567.002
Exfiltration to Cloud Storage
Command And Control
· 2
T1102.002
Bidirectional Communication
Stealth
· 1
T1027.010
Command Obfuscation
GIR coverage
0 / 480 requirements satisfied
Open matrix
No GIRs mapped yet for this actor.
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
23 techniques · layer format 4.5
Related actors
By origin and actor type
APT31
nation-state
China · 6 targets · since 2013
APT8
nation-state
China · 5 targets · since —
APT24
nation-state
China · 3 targets · since 2008
APT27
nation-state
China · 23 targets · since 2010
APT44
nation-state
Russia · 25 targets · since 2009
APT21
nation-state
China · 5 targets · since 2010
T1059.001
PowerShell
T1059.005
Visual Basic
T1555.003
Credentials from Web Browsers
T1018
Remote System Discovery
T1033
System Owner/User Discovery
T1049
System Network Connections Discovery
T1057
Process Discovery
T1069.001
Local Groups
T1518
Software Discovery
T1105
Ingress Tool Transfer