Tell me what you have, or pick a starter below. I will point you to the right CSINT page and the next safe step.
Threat actors
Threat Actors
Read known APT and criminal groups with suspected origin, target sectors, and known vulnerabilities. Curated, source-linked data; runs in the browser.
Actor-country links are suspected attributions based on public reporting, not conclusive accusations. Actively Exploited CVEs
- Map
- Actor
- Vulnerability
- Verify
Pick a country on the map, open an actor, verify its known CVEs on the radar.
Suspected origin map
Location = suspected origin (public reporting). Click a country to filter the list.
Live threat feed
New incidents and advisories
CISA, NVD, FIRST, Microsoft, and Google/Mandiant sources are checked every five minutes.
Connecting to live feed
24 actors
This atlas is for defense and awareness only. Actor-country links are suspected attributions based on public reporting, not conclusive accusations. It contains no attack instructions. Each record should be verified with independent sources.