Google Threat Intelligence Group adopts unified actor naming schema

Sat, 25 Jul 2026 12:08:50 +0000

Engineer — Skip
SOC/IR — Learn: GTIG is merging Mandiant and TAG naming systems into a cryptonym-based taxonomy; analysts should update internal runbooks and intel mappings to cross-reference old identifiers (e.g. APT numbers) with new names as GTIG rolls out the change.
Leader — Skip

Attribution on CuraSec