Some groups have multiple names associated with similar activities due to various organizations tracking similar activities by different names.
Groups are activity clusters that are tracked by a common name in the security community.Īnalysts track these clusters using various analytic methodologies and terms such as threat groups, activity groups, and threat actors.