Google has updated its system for naming hacking groups, moving away from the APT numbering scheme previously used by Mandiant, which is now part of Google. The new approach assigns each group a memorable first name and a second word indicating the country of origin, such as Castle for China, Ion for Iran, Neptune for North Korea, and Relic for Russia.

According to Shane Huntley, CTO of Google Threat Intelligence Group, the change aims to improve clarity for security researchers. Google now tracks over 5,000 “activity clusters” globally, as noted by John Hultquist, chief analyst. The naming system helps organizations identify threats faster and respond to incidents more effectively.

Huntley acknowledged that no company has complete visibility into hacker activities, and differences in data and telemetry mean that naming conventions will still vary across the industry.

Disclaimer: This post is for informational purposes only and is based on publicly available reports. The image is AI generated and is just for reference.
#Cybersecurity, #Google, #ThreatIntelligence, #HackingGroups