Cyber security companies and Antivirus vendors use different names for the same threat actors and often refer to the reports and group names of each other. However, it is a difficult task to keep track of the different names and naming schemes. I wanted to create a reference that answers questions like "I read a report about the 'Tsar Team', is there another name for that group?" or "Attackers used 'China Chopper' webshell, which of the APT groups did use that shell too?" or "Did he just say 'NetTraveler'? So, does he talk about Chinese or Russian attackers?"

Each active country / region has its own tab. The "Other" tab contains actors from certain regions not covered by the main tabs. The "Unknown" tab is used for groups and operations with no attribution. Cells with overlaps are highlighted in gray - overlaps are no error per se but necessary to visualize that groups tracked by one vendor are divided into two different groups by another vendor.

Multiple tabs. Search is implemented in the most effective way possible: control+f

Can also be accessed with the URL https://apt.threattracking.com/

Interesting APT report collection and some special Indicators of Compromise.

Short, sweet, and to the point: how to query information about packages available in Debian repositories, such as revision, maintainer, or section.