APT & Threat Actor Resources

A curated collection of APT tracking tools, actor reporting, malware indexes, naming maps, and intelligence references.

---

Table of Contents

• APT Naming Maps
• APT Group Trackers
• Threat Actor Reporting
• Malware & Infrastructure Repositories
• Campaign Timelines
• Contributing

---

APT Naming Maps

APT Map

https://aptmap.net
Visual relationships between campaigns and groups.

ESET APT Naming Chart

Community-circulated map of cross-vendor naming.

---

APT Group Trackers

MITRE ATT&CK Groups

https://attack.mitre.org/groups
Canonical group references with TTPs.

Mandiant Threat Actors

https://www.mandiant.com/resources
Group profiles and campaign reports.

---

Threat Actor Reporting

SecureList (Kaspersky)

https://securelist.com
Deep threat research.

Unit42

https://unit42.paloaltonetworks.com
APT, malware analysis, and threat actor activity.

Cisco Talos

https://talosintelligence.com
Actor and malware behavior.

---

Malware & Infrastructure Repositories

Malpedia

https://malpedia.caad.fkie.fraunhofer.de
Malware families and operator associations.

ThreatFox

https://threatfox.abuse.ch
IOC repository.

---

Campaign Timelines

APT Activity Timelines

Community-driven attack timelines from vendors like ESET, Recorded Future, and CERTs.

---

Contributing

PRs for public APT resources welcome.