Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| A cascade of compromise: unveiling Lazarus' new campaignreport | Related to | Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffactor | — | ORKL | 2023-12-12 |
| Microsoft Security Compliance and Identityreport | Related to | Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffactor | — | ORKL | 2024-04-01 |
| ESET APT Activity Report Q2 2024-Q3 2024report | Related to | MuddyWateractor | — | ORKL | 2024-11-07 |
| Inside a New Cyber Weapon: IOCONTROLreport | Related to | Predatory Sparrowactor | — | ORKL | 2024-12-18 |
| Investigating Iranian Intrusion into Strategic Middle East Critical Infrastructurereport | Related to | Imperial Kitten (CURIUM)actor | — | ORKL | 2025-03-07 |
| Israel-Hamas War in Cyber February 2024 Tool of First Resortreport | Related to | Gaza Cybergang / Moleratsactor | — | ORKL | 2024-02-08 |
| NoJustice Wiperreport | Related to | Void Manticore (Storm-0842)actor | — | ORKL | 2024-01-04 |
| Government of Iran Cyber Actors Deploy Telegram C2 to Push Malware to Identified Targetsreport | Related to | Handalaactor | — | ORKL | 2026-03-20 |
| Botnet Command & Control Infrastructure Tracking Reportreport | Related to | Cleaveractor | — | ORKL | 2023-10-12 |
| Sugarcoating Kandykorn: A Sweet Dive Into a Sophisticated macOS Backdoorreport | Related to | Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffactor | — | ORKL | 2024-09-23 |
| The Human Factor 2023report | Related to | Charming Kitten / APT42actor | — | ORKL | 2023-06-07 |
| Israel-Hamas War in Cyber February 2024 Tool of First Resortreport | Related to | Charming Kitten / APT42actor | — | ORKL | 2024-02-08 |
| rapid7-threat-landscape-report-2026.pdfreport | Related to | DragonForceactor | — | ORKL | 2026-03-17 |
| 2025 Cyber Threat Intelligence Reportreport | Related to | Cl0pactor | — | ORKL | 2025-06-24 |
| ESET APT Activity Report Q4 2024-Q1 2025report | Related to | Stealth Falconactor | — | ORKL | 2025-05-12 |
| 2025 November GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Toolsreport | Related to | Charming Kitten / APT42actor | — | ORKL | 2025-11-05 |
| New Zero-Day Vulnerability Detected: CVE-2024-43451report | Related to | Void Manticore (Storm-0842)actor | — | ORKL | 2024-11-13 |
| Scattered Spider Attack Investigation Reportreport | Related to | ALPHV / BlackCatactor | — | ORKL | 2023-11-21 |
| 2023 State of The Threat – A Year in Reviewreport | Related to | MuddyWateractor | — | ORKL | 2023-09-29 |
| Updated MATA attacks industrial companies in Eastern Europereport | Related to | Equation Groupactor | — | ORKL | 2023-10-18 |
| eset-apt-activity-report-q2-2025-q3-2025.pdfreport | Related to | MuddyWateractor | — | ORKL | 2025-10-30 |
| Lazarus Group's Large-scale Threats via Watering Hole and Financial Softwarereport | Related to | Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffactor | — | ORKL | 2024-01-12 |
| 2023 Adversary Infrastructure Reportreport | Related to | Cleaveractor | — | ORKL | 2024-01-08 |
| FIN12 UN GROUPE CYBERCRIMINEL AUX MULTIPLES RANÇONGICIELSreport | Related to | ALPHV / BlackCatactor | — | ORKL | 2023-09-12 |
| SentinelOne WatchTower Intelligence-Driven Threat Hunting End of Year 2023report | Related to | Agrius (Agonizing Serpens / BlackShadow)actor | — | ORKL | 2024-02-15 |
| 2023-05-23 - Taming the Storm- Understanding and Mitigating the Consequences of CVE-2023-27350report | Related to | Nemesis Kittenactor | — | ORKL | 2023-06-04 |
| Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectorsreport | Related to | Agrius (Agonizing Serpens / BlackShadow)actor | — | ORKL | 2024-01-16 |
| Mandiant M-Trends 2025 Reportreport | Related to | Void Manticore (Storm-0842)actor | — | ORKL | 2025-04-24 |
| Lazarus campaigns and backdoors in 2022-23report | Related to | Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffactor | — | ORKL | 2023-10-19 |
| Investigating Iranian Intrusion into Strategic Middle East Critical Infrastructurereport | Related to | Fox Kittenactor | — | ORKL | 2025-03-07 |
| Staying ahead of threat actors in the age of AIreport | Related to | Imperial Kitten (CURIUM)actor | — | ORKL | 2024-02-20 |
| OilRig's persistent attacks using cloud service-powered downloadersreport | Related to | HEXANE (Lyceum)actor | — | ORKL | 2023-12-18 |
| Israel-Hamas War in Cyber February 2024 Tool of First Resortreport | Related to | UNC1549 / TA455actor | — | ORKL | 2024-02-08 |
| M-Trends 2024 Special Reportreport | Related to | ALPHV / BlackCatactor | — | ORKL | 2024-04-22 |
| Threat Horizons Reportreport | Related to | MuddyWateractor | — | ORKL | 2023-07-26 |
| Iranian Cyber Actors May Target Vulnerable US Networks and Entities of Interestreport | Related to | Emennet Pasargadactor | — | ORKL | 2025-06-27 |
| Objective-See's Blogreport | Related to | Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffactor | — | ORKL | 2024-06-26 |
| 2023 State of The Threat – A Year in Reviewreport | Related to | Fox Kittenactor | — | ORKL | 2023-09-29 |
| Arid Viper poisons Android apps with AridSpyreport | Related to | Desert Falcons (original 2015 cluster)actor | — | ORKL | 2024-07-25 |
| Hamas Application Infrastructure Reveals Possible Overlap With TAG-63 and Iranian Threat Activityreport | Related to | Arid Viper (APT-C-23 / Desert Falcon)actor | — | ORKL | 2023-10-23 |
| Seedworm: Iranian Hackers Target Telecoms Orgs in North and East Africareport | Related to | MuddyWateractor | — | ORKL | 2024-01-16 |
| 2023 State of The Threat – A Year in Reviewreport | Related to | Predatory Sparrowactor | — | ORKL | 2023-09-29 |
| MuddyWater eN-Able spear-phishing with new TTPsreport | Related to | MuddyWateractor | — | ORKL | 2023-12-12 |
| Israel-Hamas War in Cyber February 2024 Tool of First Resortreport | Related to | Predatory Sparrowactor | — | ORKL | 2024-02-08 |
| Israel-Hamas War in Cyber February 2024 Tool of First Resortreport | Related to | Void Manticore (Storm-0842)actor | — | ORKL | 2024-02-08 |
| M-Trends 2024 Special Reportreport | Related to | Cl0pactor | — | ORKL | 2024-04-22 |
| ESET APT Activity Report Q2 2024-Q3 2024report | Related to | Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroffactor | — | ORKL | 2024-11-07 |
| Inside a New Cyber Weapon: IOCONTROLreport | Related to | CyberAv3ngersactor | — | ORKL | 2024-12-18 |
| 2023 State of The Threat – A Year in Reviewreport | Related to | Charming Kitten / APT42actor | — | ORKL | 2023-09-29 |
| Iran steps into US election 2024 with cyber-enabled influence operationsreport | Related to | APT33actor | — | ORKL | 2024-08-06 |