v1

latestOpenAPI 3.0.0Proprietary - Commercial Use Only2026-08-06172139621.6 KB

Risk Intelligence

Get the list of threat actors.

get/api/v2/riskintelligence/threat-actors

Query parameters

keystring

Example:0f8fad5b-d9cb-469f-a165-70867728950e

The search key fetched from a call to searchRiskIntelligenceThreatActors operation. When this field is empty all threat actors are returned.

page_numberinteger

Example:1

The number of the page requested.

page_size10 | 20 | 30 | 50 | 100

Example:10

The number of result items in a single response.

Response

Success

Idinteger

The Threat Actor Id

Namestring

The Threat Actor Name

Descriptionstring

The Threat Actor Description

Type'APT' | 'Ransomware'

The Threat Actor type.

CurrentExposureinteger

It is the company count exposed by vulnerability currently.

FirstSeeninteger

The date on which the threat actor was first appeared.

LastSeeninteger

The date on which the threat actor was last appeared.

ExploitedVulnerabilitiesstring[]

The list of CVE IDs of exploited vulnerabilities.

Motivationstring[]

The list of threat actor's motivations.

OriginCountrystring

The name of the individual country.

Example response

[
  {
    "Id": 2453,
    "Name": "Qilin",
    "Description": "Advanced persistent threat group known for ransomware activities",
    "Type": "APT",
    "CurrentExposure": 9,
    "FirstSeen": 2010,
    "LastSeen": 2024,
    "ExploitedVulnerabilities": [
      "CVE-2024-55956",
      "CVE-2024-12345"
    ],
    "TargetCountries": [
      {
        "Code": "US",
        "Name": "United States"
      },
      {
        "Code": "GB",
        "Name": "United Kingdom"
      },
      {
        "Code": "DE",
        "Name": "Germany"
      }
    ],
    "TargetIndustries": [
      {
        "Code": 61,
        "Name": "Finance"
      },
      {
        "Code": 42,
        "Name": "Healthcare"
      },
      {
        "Code": 15,
        "Name": "Energy"
      }
    ],
    "Motivation": [
      "Espionage",
      "Information Theft",
      "Intelligence Gathering"
    ],
    "OriginCountry": "China",
    "TTPs": [
      {
        "Code": "T1560.001",
        "Name": "Archive via Utility"
      },
      {
        "Code": "T1047",
        "Name": "Windows Management Instrumentation"
      }
    ]
  }
]