Atlas Actors147 Names471 Sectors40 Requirements480

⌘K

Atlas Actors147 Names471 Sectors40 Requirements480

LOADING

UNC1720 · APT Atlas

Actors/Nation-state / APT/Unattributed

UNC1720

APT?? · Unattributed

Targets25

Sectors5

Threat types1

GIRs covered0/480

Active since—

QUICK FACTS

TypeNation-state / APT

OriginUnattributed

First seen—

Type (verbatim)nation-state APT

GIR coverage0/480

TTPs0

Targets25

Sectors5

Last reviewed2026-05-20

Also tracked as

1 vendor names · 0 other aliases

Open Rosetta Stone

Mandiant

UNC1720

Victimology

Geographic footprint · 25 countries

origin · unattributedtargeted countries · 25

AMERICAS · 4

Argentina · Brazil · Canada · United States

OCEANIA · 2

Australia · New Zealand

EUROPE · 13

Belgium · Germany · Denmark · Estonia · Spain · United Kingdom · Hungary · Ireland · Italy · Netherlands · Poland · Russia · Ukraine

ASIA · 6

China · India · Japan · South Korea · Saudi Arabia · Türkiye

Sectors targeted

5 of 40

Financial Services74 actors Cryptocurrency21 actors Technology60 actors Telecom72 actors Energy / Utilities59 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

GIR coverage

0 / 480 requirements satisfied

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer0 techniques · layer format 4.5

Related actors

By origin and actor type

APT31nation-state

China · 6 targets · since 2013

APT8nation-state

China · 5 targets · since —

APT24nation-state

China · 3 targets · since 2008

APT27nation-state

China · 23 targets · since 2010

APT44nation-state

Russia · 25 targets · since 2009

APT21nation-state

China · 5 targets · since 2010