What's in a name? Google trots out new threat actor labels

Microsoft uses its own naming scheme for threat actors, who must be amused by the dueling formats.

Noah Bovenizer

Jul 27, 2026 - 2 min read

Google is adding yet another threat actor naming system to the cybersecurity sector, but it’s taking out two others in the process by merging Mandiant and its Threat Analysis Group.

Four years after signing its $5.4 billion deal to buy Mandiant, Google said it was merging its naming schemes with the one used by the security firm to create a central system for its Google Threat Intelligence Group (GTIG).

In a blog post shared July 25, GTIG said the cryptonym-based schema would help it standardise tracking across platforms and ‘align’ with industry standard systems by using two-word combinations.

Get the full story: Subscribe for free

Join peers managing over $100 billion in annual IT spend and subscribe to unlock full access to The Stack’s analysis and events.

Subscribe now

Already a member? Sign in