LOADING
DPRK financial-heist cluster attributed to the Reconnaissance General Bureau.
Dual-purpose Chinese threat group conducting espionage and financially motivated operations.
APT9 (also known as NIGHTSHADE PANDA and Red Pegasus) is a Chinese state-sponsored threat actor engaged in cyber espionage operations primarily targeting organizations in the United States, Japan, South Korea, and across Europe and Southeast Asia. The group focuses on intellectual property and competitive data theft, with a historically strong emphasis on the pharmaceuticals, biotechnology, healthcare, and aerospace sectors. APT9 employs a range of intrusion techniques including spearphishing, abuse of valid accounts, exploitation of trusted inter-organizational relationships, and a diverse malware toolkit comprising both publicly available and custom backdoors shared across multiple Chinese APT groups.
DPRK RGB cyber unit responsible for high-impact financial heists and espionage.
China-aligned cyber-espionage group targeting NGOs, religious orgs, and governments across Asia and Europe.
Native-English-speaking eCrime collective known for social-engineering helpdesks.
Ransomware crew historically targeting education and healthcare.