APT
ATLAS
Atlas
Actors
145
Names
507
Sectors
40
⌘K
▸
sign in
Atlas
Actors
145
Names
507
Sectors
40
LOADING
Actors
/
Cybercrime
/
Europe
UNC2165
CRIME
RU · Russia
AKA
Evil Corp · Dridex Group · DoppelPaymer · BitPaymer · Manatee Tempest
CrowdStrike
:
INDRIK SPIDER
Secureworks
:
GOLD DRAKE
Targets
19
Sectors
17
Threat types
1
GIRs mapped
0/480
Active since
—
Explore in atlas
Save actor
Share
Export
STIX 2.1
ATT&CK Navigator
Also tracked as
3 vendor names · 5 other aliases
Open Rosetta Stone
CrowdStrike
INDRIK SPIDER
Mandiant
UNC2165
Secureworks
GOLD DRAKE
UNATTRIBUTED ALIASES
Evil Corp
Dridex Group
DoppelPaymer
BitPaymer
Manatee Tempest
Victimology
Geographic footprint · 19 countries
Export STIX
origin · Russia
targeted countries · 19
ASIA ·
2
United Arab Emirates
·
Hong Kong
EUROPE ·
11
Austria
·
Switzerland
·
Germany
·
Denmark
·
Spain
·
France
·
United Kingdom
·
Ireland
·
Italy
·
Luxembourg
·
Sweden
OCEANIA ·
2
Australia
·
New Zealand
AMERICAS ·
3
Canada
·
Mexico
·
United States
AFRICA ·
1
South Africa
Sectors targeted
17 of 40
Government
100 actors
Aviation
22 actors
Financial Services
73 actors
Cryptocurrency
20 actors
Healthcare
46 actors
Telecom
71 actors
Retail & Hospitality
32 actors
NGOs & Dissidents
56 actors
Energy / Utilities
58 actors
Oil and Gas
21 actors
Education & Research
62 actors
Manufacturing (man)
49 actors
Media & Journalism
48 actors
Real Estate
9 actors
Hospitality
32 actors
Consulting / Professional Services
34 actors
Consumer Goods / Electronics
19 actors
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
FIN · Financial Fraud
MITRE ATT&CK · 0 techniques
No TTPs mapped yet.
GIR mappings
0 / 480 requirements mapped
Open matrix
No GIRs mapped yet for this actor.
References
No supporting references have been recorded for this profile. Treat uncited claims as unverified.
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
0 techniques · layer format 4.5
Related actors
By origin and actor type
APT28
nation-state
Russia · 25 targets · since 2007
APT29
nation-state
Russia · 25 targets · since 2008
APT44
nation-state
Russia · 25 targets · since 2009
DEV-0537
cybercrime
unattributed · 7 targets · since 2021
Ember Bear
nation-state
Russia · 16 targets · since 2020
Evil Corp
cybercrime
Russia · 11 targets · since 2007