Loading threat actor…
NSCN-IM, short for the Isak-Muivah faction of the National Socialist Council of Nagalim, is a Naga insurgent organization operating in India’s Northeast and across the India-Myanmar border. It is one of the most prominent armed groups associated with the long-running Naga insurgency and has maintained a ceasefire agreement with the Indian government since 1997. The group has historically operated in borderland areas where insurgent, militia, and ethnic armed networks overlap, particularly along the India-Myanmar frontier. Reporting has linked NSCN-IM to activity on both sides of the border and to clashes with other armed organizations, including the Kuki National Army near the Manipur-Myanmar border. The group has also been accused in reports of colluding with the Myanmar military against resistance elements. Based on the available facts, NSCN-IM should be characterized primarily as a regional insurgent actor with cross-border presence rather than a ransomware or cyber threat actor.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.