Google Threat Intelligence Group has introduced a unified two-word naming system to replace overlapping hacker labels inherited from Mandiant and its internal Threat Analysis Group. The new taxonomy aims to make threat tracking more intuitive and will roll out across active groups, with mappings preserved for older names and cross-vendor references. #GoogleThreatIntelligenceGroup #Mandiant #CrowdStrike #Microsoft
Keypoints
- Google is replacing split hacker naming systems with a single two-word code-name format.
- The new naming model combines a memorable first word with a category-based second word.
- Google’s approach is similar to CrowdStrike’s animal-based naming structure.
- Microsoft also revised its naming scheme in 2023, using weather terms like Sandstorm and Tempest.
- Google will keep older names searchable and map them to MITRE ATT&CK and other vendor systems.
Read More: https://cyberscoop.com/google-threat-actor-naming-system/