{"vendors":[{"n":"Microsoft","sl":"microsoft"},{"n":"Google","sl":"google"},{"n":"Apple","sl":"apple"},{"n":"Cisco","sl":"cisco"},{"n":"Fortinet","sl":"fortinet"},{"n":"Palo Alto Networks","sl":"palo-alto-networks"},{"n":"Ivanti","sl":"ivanti"},{"n":"Citrix","sl":"citrix"},{"n":"VMware / Broadcom","sl":"vmware-broadcom"},{"n":"Oracle","sl":"oracle"},{"n":"SAP","sl":"sap"},{"n":"Atlassian","sl":"atlassian"},{"n":"Juniper","sl":"juniper"},{"n":"SonicWall","sl":"sonicwall"},{"n":"F5","sl":"f5"},{"n":"Adobe","sl":"adobe"},{"n":"Linux","sl":"linux"},{"n":"AWS","sl":"aws"},{"n":"Okta","sl":"okta"},{"n":"Salesforce","sl":"salesforce"},{"n":"GitHub / GitLab","sl":"github-gitlab"},{"n":"WordPress","sl":"wordpress"},{"n":"Zyxel","sl":"zyxel"},{"n":"Veeam","sl":"veeam"},{"n":"Progress","sl":"progress"},{"n":"CrushFTP","sl":"crushftp"},{"n":"Cleo","sl":"cleo"},{"n":"Commvault","sl":"commvault"},{"n":"SolarWinds","sl":"solarwinds"},{"n":"ConnectWise","sl":"connectwise"},{"n":"Check Point","sl":"check-point"},{"n":"Samsung","sl":"samsung"},{"n":"Qualcomm","sl":"qualcomm"},{"n":"Mozilla","sl":"mozilla"},{"n":"OpenAI","sl":"openai"},{"n":"Anthropic","sl":"anthropic"},{"n":"Siemens","sl":"siemens"},{"n":"Schneider Electric","sl":"schneider-electric"},{"n":"Rockwell","sl":"rockwell"},{"n":"Docker / Kubernetes","sl":"docker-kubernetes"},{"n":"Apache","sl":"apache"},{"n":"Zimbra","sl":"zimbra"},{"n":"Roundcube","sl":"roundcube"},{"n":"Sophos","sl":"sophos"},{"n":"TP-Link / D-Link / routers","sl":"tp-link-d-link-routers"},{"n":"Trend Micro","sl":"trend-micro"}],"actors":[{"n":"APT28","sl":"apt28","o":"Russia (GRU)","al":["APT 28","Fancy Bear","Forest Blizzard","Sofacy","Sednit","STRONTIUM"]},{"n":"APT29","sl":"apt29","o":"Russia (SVR)","al":["APT 29","Cozy Bear","Midnight Blizzard","NOBELIUM","Cloaked Ursa","UNC2452"]},{"n":"Sandworm","sl":"sandworm","o":"Russia (GRU)","al":["Seashell Blizzard","APT44","APT 44","Voodoo Bear","UAC-0133","IRIDIUM"]},{"n":"Turla","sl":"turla","o":"Russia (FSB)","al":["Secret Blizzard","Venomous Bear","Snake malware","Waterbug"]},{"n":"Gamaredon","sl":"gamaredon","o":"Russia (FSB)","al":["Primitive Bear","Aqua Blizzard","UAC-0010","Shuckworm"]},{"n":"Star Blizzard","sl":"star-blizzard","o":"Russia (FSB)","al":["Callisto Group","ColdRiver","Cold River","SEABORGIUM"]},{"n":"Cadet Blizzard","sl":"cadet-blizzard","o":"Russia (GRU)","al":["Ember Bear","UAC-0056","DEV-0586"]},{"n":"Void Blizzard","sl":"void-blizzard","o":"Russia","al":["Laundry Bear"]},{"n":"Lazarus Group","sl":"lazarus-group","o":"North Korea","al":["Lazarus","Hidden Cobra","Diamond Sleet","ZINC","TraderTraitor","Jade Sleet"]},{"n":"Kimsuky","sl":"kimsuky","o":"North Korea","al":["Emerald Sleet","Velvet Chollima","APT43","APT 43","Black Banshee","Thallium"]},{"n":"APT37","sl":"apt37","o":"North Korea","al":["APT 37","ScarCruft","Reaper group","Ruby Sleet","InkySquid"]},{"n":"Andariel","sl":"andariel","o":"North Korea","al":["Onyx Sleet","APT45","APT 45","Silent Chollima"]},{"n":"DPRK IT workers","sl":"dprk-it-workers","o":"North Korea","al":["North Korean IT worker","North Korean IT workers","DPRK IT worker","remote IT worker scheme","laptop farm","laptop farms"]},{"n":"APT41","sl":"apt41","o":"China","al":["APT 41","Wicked Panda","Brass Typhoon","Barium","Winnti","Double Dragon"]},{"n":"Volt Typhoon","sl":"volt-typhoon","o":"China","al":["Vanguard Panda","BRONZE SILHOUETTE","Insidious Taurus"]},{"n":"Salt Typhoon","sl":"salt-typhoon","o":"China","al":["GhostEmperor","FamousSparrow","Earth Estries","UNC2286"]},{"n":"Silk Typhoon","sl":"silk-typhoon","o":"China","al":["HAFNIUM"]},{"n":"Flax Typhoon","sl":"flax-typhoon","o":"China","al":["Ethereal Panda","Integrity Technology Group"]},{"n":"Linen Typhoon","sl":"linen-typhoon","o":"China","al":["APT27","APT 27","Emissary Panda","LuckyMouse","Iron Tiger"]},{"n":"Mustang Panda","sl":"mustang-panda","o":"China","al":["Twill Typhoon","Earth Preta","RedDelta","Stately Taurus","TA416"]},{"n":"APT40","sl":"apt40","o":"China","al":["APT 40","Gingham Typhoon","Leviathan","Kryptonite Panda","TEMP.Periscope"]},{"n":"APT31","sl":"apt31","o":"China","al":["APT 31","Violet Typhoon","Zirconium","Judgment Panda"]},{"n":"APT10","sl":"apt10","o":"China","al":["APT 10","Stone Panda","MenuPass"]},{"n":"Charcoal Typhoon","sl":"charcoal-typhoon","o":"China","al":["Chromium APT","ControlX"]},{"n":"Earth Lamia","sl":"earth-lamia","o":"China","al":[]},{"n":"UNC5221","sl":"unc5221","o":"China","al":["UNC5337"]},{"n":"UNC3886","sl":"unc3886","o":"China","al":[]},{"n":"Storm-0558","sl":"storm-0558","o":"China","al":[]},{"n":"MuddyWater","sl":"muddywater","o":"Iran (MOIS)","al":["Mango Sandstorm","Static Kitten","Seedworm","TEMP.Zagros"]},{"n":"APT33","sl":"apt33","o":"Iran","al":["APT 33","Peach Sandstorm","Elfin","Refined Kitten","HOLMIUM"]},{"n":"APT34","sl":"apt34","o":"Iran","al":["APT 34","OilRig","Hazel Sandstorm","Helix Kitten","Earth Simnavaz"]},{"n":"APT35","sl":"apt35","o":"Iran (IRGC)","al":["APT 35","APT42","APT 42","Charming Kitten","Mint Sandstorm","Phosphorus"]},{"n":"CyberAv3ngers","sl":"cyberav3ngers","o":"Iran (IRGC)","al":["Cyber Av3ngers","Storm-0784"]},{"n":"Handala","sl":"handala","o":"Iran","al":[]},{"n":"Scattered Spider","sl":"scattered-spider","o":"Cybercrime","al":["Octo Tempest","UNC3944","0ktapus","Muddled Libra","Starfraud"]},{"n":"ShinyHunters","sl":"shinyhunters","o":"Cybercrime","al":["UNC6040","Scattered LAPSUS$ Hunters"]},{"n":"LAPSUS$","sl":"lapsuss","o":"Cybercrime","al":["Strawberry Tempest"]},{"n":"FIN7","sl":"fin7","o":"Cybercrime","al":["Carbanak","Sangria Tempest"]},{"n":"FIN8","sl":"fin8","o":"Cybercrime","al":[]},{"n":"TA505","sl":"ta505","o":"Cybercrime","al":["Lace Tempest"]},{"n":"Evil Corp","sl":"evil-corp","o":"Cybercrime (Russia)","al":["Indrik Spider","Manatee Tempest"]},{"n":"TeamTNT","sl":"teamtnt","o":"Cybercrime","al":[]},{"n":"Transparent Tribe","sl":"transparent-tribe","o":"Pakistan","al":["APT36","APT 36","Mythic Leopard","ProjectM"]},{"n":"SideWinder","sl":"sidewinder","o":"India","al":["Rattlesnake APT","Razor Tiger"]},{"n":"Patchwork","sl":"patchwork","o":"India","al":["Dropping Elephant","Hangover Group"]},{"n":"Bitter APT","sl":"bitter-apt","o":"South Asia","al":["APT-C-08","T-APT-17"]},{"n":"Equation Group","sl":"equation-group","o":"United States","al":[]},{"n":"Killnet","sl":"killnet","o":"Hacktivist (pro-Russia)","al":[]},{"n":"NoName057(16)","sl":"noname057-16","o":"Hacktivist (pro-Russia)","al":["NoName057","NoName 057"]},{"n":"Anonymous Sudan","sl":"anonymous-sudan","o":"Hacktivist","al":["Storm-1359"]},{"n":"Cyber Army of Russia","sl":"cyber-army-of-russia","o":"Hacktivist (pro-Russia)","al":[]}],"groups":[{"n":"thegentlemen","sl":"thegentlemen","c":135},{"n":"N0n","sl":"n0n","c":114},{"n":"qilin","sl":"qilin","c":87},{"n":"nightspire","sl":"nightspire","c":36},{"n":"incransom","sl":"incransom","c":36},{"n":"akira","sl":"akira","c":32},{"n":"Storm","sl":"storm","c":28},{"n":"Wallstreet","sl":"wallstreet","c":26},{"n":"safepay","sl":"safepay","c":25},{"n":"settra","sl":"settra","c":24},{"n":"emperador","sl":"emperador","c":23},{"n":"clop","sl":"clop","c":23},{"n":"Majinahanashi","sl":"majinahanashi","c":20},{"n":"lockbit5","sl":"lockbit5","c":20},{"n":"everest","sl":"everest","c":18},{"n":"play","sl":"play","c":18},{"n":"SilentRansomGroup","sl":"silentransomgroup","c":17},{"n":"lamashtu","sl":"lamashtu","c":14},{"n":"dragonforce","sl":"dragonforce","c":13},{"n":"interlock","sl":"interlock","c":13},{"n":"rhysida","sl":"rhysida","c":13},{"n":"Booba Project","sl":"booba-project","c":13},{"n":"krybit","sl":"krybit","c":13},{"n":"AuditTeam","sl":"auditteam","c":12},{"n":"Panzer","sl":"panzer","c":11},{"n":"Eclipse","sl":"eclipse","c":10},{"n":"BYOD","sl":"byod","c":10},{"n":"metaencryptor","sl":"metaencryptor","c":10},{"n":"BrainCipher","sl":"braincipher","c":10},{"n":"UmBra","sl":"umbra","c":10},{"n":"aurora","sl":"aurora","c":9},{"n":"Orova","sl":"orova","c":9},{"n":"threeam","sl":"threeam","c":9},{"n":"medusalocker","sl":"medusalocker","c":9},{"n":"iah6477","sl":"iah6477","c":8},{"n":"Vexy Ransomware","sl":"vexy-ransomware","c":8},{"n":"pear","sl":"pear","c":8},{"n":"THE SEVEN DEADLY SINS","sl":"the-seven-deadly-sins","c":8},{"n":"HYFLOCK","sl":"hyflock","c":8},{"n":"Helix","sl":"helix","c":7},{"n":"arcusmedia","sl":"arcusmedia","c":7},{"n":"VYPR","sl":"vypr","c":7},{"n":"m3rx","sl":"m3rx","c":7},{"n":"Deadlock","sl":"deadlock","c":6},{"n":"termite","sl":"termite","c":6},{"n":"netrunner","sl":"netrunner","c":6},{"n":"ZaWoo","sl":"zawoo","c":6},{"n":"Redact","sl":"redact","c":5},{"n":"kairos","sl":"kairos","c":5},{"n":"Barracuda","sl":"barracuda","c":5},{"n":"EndZone","sl":"endzone","c":5},{"n":"Doommageddon","sl":"doommageddon","c":5},{"n":"shinyhunters","sl":"shinyhunters","c":5},{"n":"ransomhouse","sl":"ransomhouse","c":4},{"n":"chaos","sl":"chaos","c":4},{"n":"payoutsking","sl":"payoutsking","c":4},{"n":"anubis","sl":"anubis","c":4},{"n":"genesis","sl":"genesis","c":4},{"n":"bravox","sl":"bravox","c":3},{"n":"spacebears","sl":"spacebears","c":3},{"n":"Dark Project","sl":"dark-project","c":3},{"n":"Black X","sl":"black-x","c":3},{"n":"cry0","sl":"cry0","c":3},{"n":"Global Secret Group","sl":"global-secret-group","c":3},{"n":"Spirals","sl":"spirals","c":3},{"n":"cloak","sl":"cloak","c":2},{"n":"direwolf","sl":"direwolf","c":2},{"n":"payload","sl":"payload","c":2},{"n":"Gammax","sl":"gammax","c":2},{"n":"BlackLocks","sl":"blacklocks","c":2},{"n":"ImNotAVillain","sl":"imnotavillain","c":2},{"n":"titan","sl":"titan","c":2},{"n":"unsafe","sl":"unsafe","c":2},{"n":"0x00","sl":"0x00","c":1},{"n":"blacknevas","sl":"blacknevas","c":1},{"n":"sarcoma","sl":"sarcoma","c":1},{"n":"exitium","sl":"exitium","c":1},{"n":"RunSomeWares","sl":"runsomewares","c":1},{"n":"Scarlettgroup","sl":"scarlettgroup","c":1},{"n":"insomnia","sl":"insomnia","c":1}],"malware":["XWorm","ClickFix","BPFDoor","Aisuru","Kimwolf","njRAT","Cobalt Strike","Metasploit","Shai-Hulud","StealC","Pegasus","Vidar"],"categories":[{"c":"app","l":"Application Security"},{"c":"exp","l":"Exploit Development"},{"c":"net","l":"Network Security"},{"c":"mal","l":"Malware"},{"c":"rev","l":"Reverse Engineering"},{"c":"cloud","l":"Cloud Security"},{"c":"crypto","l":"Cryptography"},{"c":"id","l":"Identity & Access"},{"c":"os","l":"Operating Systems"},{"c":"mobile","l":"Mobile"},{"c":"ics","l":"ICS / OT"},{"c":"dfir","l":"Forensics & IR"},{"c":"social","l":"Social Engineering"},{"c":"supply","l":"Supply Chain"},{"c":"ai","l":"AI Security"},{"c":"privacy","l":"Privacy & Policy"},{"c":"hw","l":"Hardware"}],"products":[{"n":"Windows","k":"Operating system"},{"n":"Windows Server","k":"Operating system"},{"n":"macOS","k":"Operating system"},{"n":"iOS","k":"Mobile OS"},{"n":"Android","k":"Mobile OS"},{"n":"Linux kernel","k":"Operating system"},{"n":"ChromeOS","k":"Operating system"},{"n":"Chrome","k":"Browser"},{"n":"Firefox","k":"Browser"},{"n":"Safari","k":"Browser"},{"n":"Edge","k":"Browser"},{"n":"Exchange","k":"Mail server"},{"n":"SharePoint","k":"Collaboration"},{"n":"Outlook","k":"Mail client"},{"n":"Microsoft 365","k":"SaaS suite"},{"n":"Teams","k":"Collaboration"},{"n":"Entra ID","k":"Identity"},{"n":"Active Directory","k":"Identity"},{"n":"Kerberos","k":"Protocol"},{"n":"NTLM","k":"Protocol"},{"n":"Azure","k":"Cloud"},{"n":"AWS","k":"Cloud"},{"n":"Google Cloud","k":"Cloud"},{"n":"Kubernetes","k":"Container orchestration"},{"n":"Docker","k":"Containers"},{"n":"containerd","k":"Containers"},{"n":"NetScaler","k":"ADC / VPN gateway"},{"n":"FortiGate","k":"Firewall / VPN"},{"n":"FortiWeb","k":"WAF"},{"n":"FortiManager","k":"Management"},{"n":"PAN-OS","k":"Firewall"},{"n":"Ivanti Connect Secure","k":"VPN"},{"n":"Ivanti EPMM","k":"Mobile management"},{"n":"Cisco ASA","k":"Firewall"},{"n":"Cisco IOS XE","k":"Network OS"},{"n":"Cisco ISE","k":"NAC"},{"n":"SonicOS","k":"VPN / Firewall"},{"n":"Juniper Junos","k":"Network OS"},{"n":"F5 BIG-IP","k":"ADC"},{"n":"Check Point Gateway","k":"Firewall"},{"n":"Zyxel","k":"Network devices"},{"n":"MikroTik RouterOS","k":"Router OS"},{"n":"TP-Link","k":"Routers"},{"n":"D-Link","k":"Routers"},{"n":"Ubiquiti","k":"Network devices"},{"n":"VMware ESXi","k":"Hypervisor"},{"n":"VMware vCenter","k":"Virtualization"},{"n":"Hyper-V","k":"Hypervisor"},{"n":"Proxmox","k":"Hypervisor"},{"n":"Veeam","k":"Backup"},{"n":"Commvault","k":"Backup"},{"n":"Oracle E-Business Suite","k":"ERP"},{"n":"Oracle WebLogic","k":"App server"},{"n":"Oracle PeopleSoft","k":"HR / ERP"},{"n":"SAP NetWeaver","k":"ERP platform"},{"n":"Salesforce","k":"CRM"},{"n":"Snowflake","k":"Data cloud"},{"n":"ServiceNow","k":"ITSM"},{"n":"Workday","k":"HR SaaS"},{"n":"Confluence","k":"Wiki"},{"n":"Jira","k":"Issue tracker"},{"n":"GitLab","k":"DevOps"},{"n":"GitHub","k":"DevOps"},{"n":"GitHub Actions","k":"CI/CD"},{"n":"Jenkins","k":"CI/CD"},{"n":"TeamCity","k":"CI/CD"},{"n":"JFrog Artifactory","k":"Artifact repo"},{"n":"npm","k":"Package registry"},{"n":"PyPI","k":"Package registry"},{"n":"VS Code","k":"Code editor"},{"n":"Chrome extensions","k":"Browser extensions"},{"n":"WordPress","k":"CMS"},{"n":"Drupal","k":"CMS"},{"n":"Magento","k":"E-commerce"},{"n":"Apache Tomcat","k":"App server"},{"n":"Apache Struts","k":"Framework"},{"n":"Log4j","k":"Library"},{"n":"ActiveMQ","k":"Message broker"},{"n":"Nginx","k":"Web server"},{"n":"OpenSSH","k":"Remote access"},{"n":"OpenSSL","k":"Crypto library"},{"n":"glibc","k":"Library"},{"n":"sudo","k":"Utility"},{"n":"XZ Utils","k":"Library"},{"n":"MOVEit","k":"File transfer"},{"n":"CrushFTP","k":"File transfer"},{"n":"Cleo","k":"File transfer"},{"n":"GoAnywhere","k":"File transfer"},{"n":"Kiteworks","k":"File transfer"},{"n":"ScreenConnect","k":"Remote access"},{"n":"AnyDesk","k":"Remote access"},{"n":"TeamViewer","k":"Remote access"},{"n":"SimpleHelp","k":"Remote access"},{"n":"Kaseya VSA","k":"RMM"},{"n":"N-able","k":"RMM"},{"n":"SolarWinds","k":"IT management"},{"n":"Zimbra","k":"Mail server"},{"n":"Roundcube","k":"Webmail"},{"n":"Microsoft SQL Server","k":"Database"},{"n":"MongoDB","k":"Database"},{"n":"Redis","k":"Database"},{"n":"Elasticsearch","k":"Database"},{"n":"Okta","k":"Identity"},{"n":"Cloudflare","k":"CDN / security"},{"n":"CrowdStrike Falcon","k":"EDR"},{"n":"Microsoft Defender","k":"EDR"},{"n":"Signal","k":"Messaging"},{"n":"WhatsApp","k":"Messaging"},{"n":"Telegram","k":"Messaging"},{"n":"ChatGPT","k":"AI assistant"},{"n":"Copilot","k":"AI assistant"},{"n":"Claude","k":"AI assistant"},{"n":"Gemini","k":"AI assistant"},{"n":"MCP","k":"AI protocol"},{"n":"OpenClaw","k":"AI agent"},{"n":"vLLM","k":"LLM inference"},{"n":"iPhone","k":"Mobile device"},{"n":"Pixel","k":"Mobile device"},{"n":"Galaxy","k":"Mobile device"},{"n":"Snapdragon","k":"Chipset"},{"n":"UEFI","k":"Firmware"},{"n":"SIMATIC","k":"ICS"},{"n":"Modicon","k":"ICS"},{"n":"Allen-Bradley","k":"ICS"},{"n":"Crypto exchanges","k":"Crypto"},{"n":"Starlink","k":"Satellite"},{"n":"Tor","k":"Anonymity network"}]}