Will the cybersecurity industry coin a new named threat-actor group with the prefix "TA-" or "APT-" in 2026?

About

Resolves YES if any major TI vendor (Mandiant/Google TI, Microsoft Threat Intelligence, CrowdStrike, Proofpoint, Cisco Talos, Recorded Future) publicly attributes a 2026 incident to a newly named actor whose identifier begins with TA or APT followed by a number (e.g., TA499, APT45).

Resolution criteria

Vendor blog or report dated in 2026 introducing a new identifier matching the pattern.

Source

Vendor TI blogs and quarterly reports.

Ambiguity

AMBIGUOUS if the identifier was used internally before 2026 but only publicly disclosed in 2026.

Discussion

Loading comments…