This is the Trace Id: 293333f9987b4fe31bcc6a26e5ff1e61

Microsoft threat actor mapping

List of threat actors previously publicly disclosed old actor names and how it translates to the new naming convention implemented by Microsoft. The list maps the threat actors' old and new names, the origin or motivation, and where applicable, how other security organizations name these actors.

Important! Selecting a language below will dynamically change the complete page content to that language.

Download
  • Version:

    1

    Date Published:

    15/01/2026

    File Name:

    Microsoft-threat-actor-list.xlsx

    File Size:

    27.6 KB

    We have created a list containing our previously publicly disclosed old actor names and how it translates to our new taxonomy. The list maps the threat actors' previous and new names, the origin or intent, and, where applicable, how other security organizations name these actors.
  • Supported Operating Systems

    Android, iOS, Windows 11

    None
    1. Select the Download the threat actor mapping link to start the download.
    2. The download should start automatically. If prompted, select Save or Save this program to disk.
    3. Select Open file or find the file on your device and open it.