ahnlab-tip-threat-actors

Fetch threat actor catalog from the AhnLab TIP service.

ahnlab-tip-threat-actors [profile=PROFILE] [pretty=PRETTY]

profile=PROFILE: Optional. Ahnlab TIP connect profile code
pretty=PRETTY: Optional. Enable human-friendly output.

Output Fields

Field	Type	Name	Description
profile	String	Connect profile	AhnLab TIP connect profile code. e.g. atip
risk	String	Risk	Risk level. e.g. LOW, MEDIUM, HIGH
name	String	Name	Threat actor name. e.g. Akira, KillSec
aliases	List	Aliases	Threat actor aliases. e.g. ["Akira Gang", "Storm-1567"]
src_country_names	List	Source country names	Source country names. e.g. ["Russia"]
target_country_names	List	Target country names	Target country names. e.g. ["United States", "Canada", "Korea"]
target_sectors	List	Target sectors	Target industry sectors. e.g. ["Education", "Finance", "Government"]
first_seen	Date	First seen	First detection time. e.g. 2023-03-01 00:00:00+0900
last_seen	Date	Last seen	Last detection time. e.g. 2025-11-28 00:00:00+0900
description	String	Description	Threat actor description
techniques	List	Techniques	Attack techniques. e.g. ["Supply Chain"]
related_actors	List	Related actors	Related threat actors
cve_names	List	CVE names	CVE identifiers. e.g. ["CVE-2024-40711", "CVE-2023-20269"]
target_os_names	List	Target OS names	Target operating systems. e.g. ["Windows", "Linux"]
name_ko	String	Korean name	Korean name of threat actor. e.g. 아키라
actor_id	Integer	Actor ID	Threat actor ID. e.g. 25701
actor_url	String	Actor URL	AhnLab TIP actor page URL. e.g. https://atip.ahnlab.com/threat-actor/view?seq=25701
severity	Integer	Severity	Severity score (0-100). e.g. 100
has_ip	Bool	Has IP	IP IoC exists. e.g. true
has_file	Bool	Has file	File IoC exists. e.g. true
has_domain	Bool	Has domain	Domain IoC exists. e.g. false
has_url	Bool	Has URL	URL IoC exists. e.g. true
src_country_codes	List	Source country codes	Source country codes. e.g. ["RU"]
target_country_codes	List	Target country codes	Target country codes. e.g. ["US", "CA", "KR"]