Updated Cyber Threat Actor Naming System

Google Threat Intelligence Group (GTIG) is rolling out a new unified naming schema for tracking cyber threat actors, replacing the separate systems previously used by Mandiant and Google's Threat Analysis Group (TAG). The new system uses cryptonyms — memorable two-word combinations — where the first word identifies the specific actor and the second word categorizes them by motivation, attribution, or activity type. The goal is to make threat tracking more intuitive rather than relying on memorization of sequential identifiers like APT1. Old names remain searchable in the GTI platform with MITRE ATT&CK mappings and vendor aliases preserved. The rollout begins with several dozen of the most active groups, with more to follow.

Source: https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system. 8sync News only summarizes and links out; content copyright belongs to the authors and original sources.