Google’s top hacker hunter explains why hacking groups get codenames
Google has updated its naming convention for state-sponsored hacking groups to improve clarity for security professionals. The new system uses a memorable first name followed by a suffix indicating the country of origin.
Why it matters
Standardized naming helps government and security agencies track thousands of global cyber threats more effectively.
For more than a decade, the cybersecurity industry has been assigning names to different hacking groups. Some of them, like Fancy Bear , have crossed over into the mainstream because of their prominent hacks and memorable names. Others are only known within the cybersecurity industry.
Oftentimes, even industry insiders can’t keep track. In part, that’s because every company names hacking groups differently. That’s why there are resources like this one , which attempt to be a one-stop shop where cybersecurity professionals, government officials, policymakers, journalists, and the wider public can make sense of who is who.
Last month, Google became the latest company to revamp its naming system for hacking groups.
Gone are the days APT1, APT41 or APT whatever number , which was the system adopted by Mandiant, once an independent security firm that’s now part of Google. Mandiant was the first to adopt a naming scheme.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in