APT
ATLAS
Atlas
Actors
147
Names
471
Sectors
40
Requirements
480
⌘K
▸
sign in
Atlas
Actors
147
Names
471
Sectors
40
Requirements
480
LOADING
Actors
/
Cybercrime
/
Unattributed
TA570
CRIME
?? · Unattributed
AKA
Charming Serpens
Targets
0
Sectors
0
Threat types
2
GIRs covered
8/480
Active since
2020
Pin to atlas
Watch
Share
Export
Also tracked as
1 vendor names · 1 other aliases
Open Rosetta Stone
Proofpoint
TA570
UNATTRIBUTED ALIASES
Charming Serpens
Victimology
Geographic footprint · 0 countries
Region filter
Export
origin · unattributed
targeted countries · 0
No targets recorded for this actor.
Sectors targeted
0 of 40
No sectors targeted yet for this actor.
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
FIN · Financial Fraud
RAN · Ransomware
MITRE ATT&CK · 10 techniques
Initial Access
· 1
T1566
Phishing
Execution
· 2
T1059
Command and Scripting Interpreter
T1204
User Execution
Impact
· 4
T1486
Data Encrypted for Impact
Command And Control
· 1
T1071
Application Layer Protocol
Stealth
· 2
T1027
Obfuscated Files or Information
GIR coverage
8 / 480 requirements satisfied
Open matrix
1 · 1 - Malware
1.1.1
1.2.2
1.3.8
4 · 4 - Fraud, Identity Theft and Unauthorized Access
4.2.5
4.4.1
5 · 5 - Adversary Tactics and Activities
5.2.1
5.2.12
6 · 6 - Threats Impacting Industry or Region
6.1.3
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
10 techniques · layer format 4.5
Related actors
By origin and actor type
FIN10
cybercrime
unattributed · 1 targets · since 2013
FIN2
cybercrime
unattributed · 0 targets · since —
FIN6
cybercrime
Russia · 15 targets · since 2014
APT73
nation-state
unattributed · 0 targets · since —
UNC1543
cybercrime
unattributed · 22 targets · since —
FIN3
cybercrime
unattributed · 1 targets · since —
T1489
Service Stop
T1490
Inhibit System Recovery
T1657
Financial Theft
T1078
Valid Accounts