thrunter.org

Home of the

APT ZOO

Too many threat actor names to remember? Look one up and see every alias it goes by, who wrote about it, and where.

Open the APT Zoo See example searches

Tools

APT Zoo Live

A lookup for threat actor names and aliases. Search by name, wildcard or regex, or find actors by what their descriptions say and who has reported on them. Data merged from ETDA, MISP, MITRE, Malpedia, Microsoft, ransomware.live, Wiz and more.

Open the APT Zoo →

Something else is stirring Soon

The zoo isn't the only enclosure being built. Check back here for the reveal.

What is thrunter.org?

thrunter.org builds free tools and data for threat hunters and CTI analysts. It grew out of a simple frustration: every vendor names the same adversary differently, and keeping track of who's who takes longer than the analysis. The APT Zoo was the first answer to that.

Questions, corrections or ideas: get in touch anonymously, or read how the data is put together.