Cyber threat intelligence
Vendor names describe overlapping activity, not identical groups. Each dossier keeps designations, confidence and evidence attached to every claim.
Actor directory
Search the dossiers or filter by state alignment.
5 profiles
State-aligned OT threat group
A Dragos-designated, state-aligned OT threat group linked by substantial technical overlap to the IRGC-affiliated CyberAv3ngers persona.
State-sponsored OT threat group
An IRGC-affiliated threat persona associated with disruptive targeting of exposed operational technology, most visibly the 2023 Unitronics PLC/HMI campaign.
State-aligned OT espionage group
A Dragos-designated Stage 1 OT threat group conducting credential theft and espionage against energy, logistics and industrial organisations, with reported overlap to APT28.
State-aligned OT access group
A Dragos-designated access-development group that penetrates industrial organisations, steals and replays credentials, and enables follow-on ICS operations by teams such as ELECTRUM.
State-sponsored destructive threat group
A Russian GRU Unit 74455 threat group responsible for destructive global operations and multiple attacks that produced or attempted operational effects in Ukraine's electric grid.
Clear a filter or search for a designation, state or targeted sector.