Cyber Resilience

Threat actor · all actors

Velvet AntG1047 unknown

aka Velvet Ant

Last updated: 2026-07-03

0attributed CVEs
31ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
years active

About this actor

[Velvet Ant](https://attack.mitre.org/groups/G1047) is a threat actor operating since at least 2021. [Velvet Ant](https://attack.mitre.org/groups/G1047) is associated with complex persistence mechanisms, the targeting of network devices and appliances during operations, and the use of zero day exploits.(Citation: Sygnia VelvetAnt 2024A)(Citation: Sygnia VelvetAnt 2024B)

Source: MITRE ATT&CK

Activity timeline

No activity events recorded.

Profile

CVERiskCVSSEPSSPublishedProducts
No attributed CVEs.

Mitigating controls (NIST 800-53)

ControlTechniques coveredCoverage
SI-429 / 3194%
CM-628 / 3190%
CM-225 / 3181%
CM-723 / 3174%
SI-323 / 3174%
CA-722 / 3171%
AC-320 / 3165%
AC-617 / 3155%
SI-716 / 3152%
AC-215 / 3148%
IA-214 / 3145%
SC-713 / 3142%
AC-412 / 3139%
AC-512 / 3139%
CM-512 / 3139%

Co-occurring actors

None.

Similar actors