Curated by Brandefense analysts

Know Who Is Coming For You.

Profiles of nation-state, ransomware and cybercrime groups. Each one shows who the actor is, the sectors it hits, the techniques it uses and the CVEs it exploits, where the source has them.

The tool runs on ATLAS, the free tool site by Brandefense. Opens in a new tab, no signup.

OriginTarget sectorMotivation
EG

Example Group

aka Alias One · Alias Two · Alias Three

Nation-state APTEspionageAdvanced
TTPs
•••
CVEs exploited
••
Malware
•••
Profile
Nation-state APTRansomwareCybercrimeOther

Sample card, invented actor

What you get

What You See On ATLAS.

  1. 01

    Search by name or alias

    Find an actor under any of its known names.

  2. 02

    Filters

    Origin, target sector, motivation (espionage, financial, ideology) and actor type.

  3. 03

    Cards or table

    Switch between a card view and a table.

  4. 04

    Per-group facts

    Aliases, techniques, exploited CVEs, malware and a skill rating where available.

Who it is for

Who Uses The Threat Actors Database.

  • Threat intelligence analysts building actor profiles
  • SOC teams mapping detections to techniques
  • Risk teams asking which groups target their sector

On the Brandefense platform

From profiles to your own exposure.

Cyber threat intelligence ties these groups to what is aimed at your company, so the profile becomes a decision.

Open in ATLAS (opens in a new tab) Request a demo

The page shows published profiles. More groups are tracked on the platform than are published here.