Threat Intelligence / Actor / IPIDEA Operators / Multiple Criminal Groups (550+)

IPIDEA Operators / Multiple Criminal Groups (550+)

Nation: Multiple (China, Russia, Iran, North Korea) · 1 tracked threat(s) · Categories: THREAT_INTEL

Also known as: APT28, IPIDEA Operators, Sandworm, Volt Typhoon

Tracked threats

IPIDEA Residential Proxy Botnet Disruption by Google — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence