Gold Open Source

Explore Packages Vulnerabilities CWEs MCP Servers Scan

Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

Explore Everything
Packages
Gold Certified Packages
Container Images
AI Models
MCP Servers
Agent Skills
Chip Manufacturers

Security Data & Tools

Scan Your Dependencies
Trending Threats
Threat RSS Feeds
CVE Database
Actively Exploited (KEV)
SGZ Zero-Days
CWE Index
MITRE ATT&CK
Malicious Packages
Security Glossary
Supply-Chain Report
Developers (API & Badge)
Chrome Extension
Credits & Data Sources

Products

The Platform
ESSCM
Portal
TPRM
OSM
Cowork
Code / Runner
Guard

Use Cases

Know Your Software
Auto-Fix Vulnerabilities
Asset Discovery
AI Governance
MCP Server Security
Supply Chain Compliance
Zero-Day Discovery
All Use Cases

Company

About
Pricing
Blog
Documentation
Safeguard Academy
Contact
Privacy Policy
Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard

Home/MITRE ATT&CK/Campaigns

Intrusion Campaigns

ATT&CK Campaigns

59 tracked intrusion campaigns — the ATT&CK techniques used, attributed groups, and malware deployed in each.

C0001Frankenstein2019 · 27 techniques C0002Night Dragon2009 · 29 techniques C0004CostaRicto2019 · 10 techniques C0005Operation Spalax2019 · 17 techniques C0006Operation Honeybee2017 · 28 techniques C0007FunnyDream2018 · 14 techniques C0010C00102020 · 9 techniques C0011C00112021 · 8 techniques C0012Operation CuckooBees2019 · 33 techniques C0013Operation Sharpshooter2017 · 13 techniques C0014Operation Wocao2017 · 70 techniques C0015C00152021 · 34 techniques C0016Operation Dust Storm2010 · 21 techniques C0017C00172021 · 29 techniques C0018C00182022 · 19 techniques C0020Maroochy Water Breach2000 · 12 techniques C0021C00212018 · 15 techniques C0022Operation Dream Job2019 · 55 techniques C0023Operation Ghost2013 · 8 techniques C0024SolarWinds Compromise2019 · 71 techniques C00252016 Ukraine Electric Power Attack2016 · 27 techniques C0026C00262022 · 6 techniques C0027C00272022 · 28 techniques C00282015 Ukraine Electric Power Attack2015 · 37 techniques C0029Cutting Edge2023 · 31 techniques C0030Triton Safety Instrumented System Attack2017 · 20 techniques C0031Unitronics Defacement Campaign2023 · 6 techniques C0032C00322014 · 17 techniques C0033C00332016 · 20 techniques C00342022 Ukraine Electric Power Attack2022 · 15 techniques C0035KV Botnet Activity2022 · 20 techniques C0036Pikabot Distribution February 20242024 · 4 techniques C0037Water Curupira Pikabot Distribution2023 · 10 techniques C0038HomeLand Justice2021 · 25 techniques C0039Versa Director Zero Day Exploitation2024 · 8 techniques C0040APT41 DUST2023 · 23 techniques C0041FrostyGoop Incident2024 · 9 techniques C0042Outer Space2021 · 8 techniques C0043Indian Critical Infrastructure Intrusions2021 · 8 techniques C0044Juicy Mix2022 · 14 techniques C0045ShadowRay2023 · 10 techniques C0046ArcaneDoor2023 · 25 techniques C0047RedDelta Modified PlugX Infection Chain Operations2023 · 22 techniques C0048Operation MidnightEclipse2024 · 17 techniques C0049Leviathan Australian Intrusions2022 · 26 techniques C0050J-magic Campaign2023 · 4 techniques C0051APT28 Nearest Neighbor Campaign2022 · 18 techniques C0052SPACEHOP Activity2019 · 4 techniques C0053FLORAHOX Activity2019 · 6 techniques C0054Operation Triangulation2019 · 20 techniques C0055Quad7 Activity2023 · 15 techniques C0056RedPenguin2024 · 26 techniques C00573CX Supply Chain Attack2022 · 22 techniques C0058SharePoint ToolShell Exploitation2025 · 35 techniques C0059Salesforce Data Exfiltration2004 · 18 techniques C0060Operation AkaiRyū2004 · 26 techniques C0061Operation Digital Eye2024 · 22 techniques C0062Anthropic AI-orchestrated Campaign2025 · 26 techniques C00632025 Poland Wiper Attacks2025 · 73 techniques