Threat Actor

Sharpshooter

Also known as: Sharpshooter

Operation [Sharpshooter](https://attack.mitre.org/groups/G0104) is the name of a cyber espionage campaign discovered in October 2018 targeting nuclear, defense, energy, and financial companies. Though overlaps between this adversary and [Lazarus Group](https://attack.mitre.org/groups/G0032) have been noted, definitive links have not been established.(Citation: McAfee Sharpshooter December 2018)

Properties

stix_id
intrusion-set--5e78ae92-3ffd-4b16-bf62-e798529d73f1
signal_observed_at
2026-09-11T17:54:59+00:00
type
intrusion-set

Explore this actor's full graph with Ninja Signal