All actors

TheWizards

Linked to China by one source.

Reports
4
Last reported
Known CVEs
9
Origin
China
ID
thewizards
Merge evidence
2 alias matches

Reports per quarter

  1. 2023 Q4: 1 report
  2. 2024 Q1: 1 report
  3. 2024 Q2: no reports
  4. 2024 Q3: no reports
  5. 2024 Q4: no reports
  6. 2025 Q1: no reports
  7. 2025 Q2: 1 report
  8. 2025 Q3: no reports
  9. 2025 Q4: 1 report
Dated reports, 2023 Q4 to 2025 Q4.

Techniques seen in the last two years

Show all 28 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

Newest first. Details opens the report in Explore.