Public Threat Actor & Ransomware Activity Monitor
Pricing
Pay per usage
Monitor public reporting on 20 APT and ransomware groups. Get structured actor profiles, recent claims, targets, ATT&CK techniques, freshness, confidence, source coverage, and provenance without raw leak data.
You can access the Public Threat Actor & Ransomware Activity Monitor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.
$echo '{< "queries": [< "APT29",< "APT28",< "APT42",< "Lazarus Group",< "Volt Typhoon",< "Salt Typhoon",< "Turla",< "Sandworm",< "Kimsuky",< "MuddyWater",< "Charming Kitten",< "Scattered Spider",< "LockBit",< "Clop",< "Akira",< "Black Basta",< "Play",< "RansomHub",< "ALPHV",< "Hunters International"< ]<}' |<apify call eirikhanasand/public-threat-actor-monitor --silent --output-datasetThe Apify CLI is the official tool that allows you to use Public Threat Actor & Ransomware Activity Monitor locally, providing convenience functions and automatic retries on errors.
Using installation script (macOS/Linux):
$curl -fsSL https://apify.com/install-cli.sh | bashUsing installation script (Windows):
$irm https://apify.com/install-cli.ps1 | iexUsing Homebrew:
$brew install apify-cliUsing npm:
$npm install -g apify-cliOther API clients include: