Loading threat actor…
Al-Qaeda is a transnational Islamist terrorist organization also known as al-Qaida. It has operated training camps, guesthouses, safe houses, facilitation networks, and document-forgery capabilities in Afghanistan and Pakistan. Its members received militant, tactical, artillery, and explosives training; served in Taliban front-line units; and acted as security personnel and bodyguards for Usama bin Laden. Al-Qaeda operatives supported the August 1998 bombings of the U.S. embassies in Kenya and Tanzania through procurement and transport of explosive materials, detonators, gas cylinders, and the vehicle used in the Dar es Salaam attack. The organization has also used forged and recycled travel documents to move personnel out of Afghanistan and Pakistan following the 9/11 attacks. Al-Qaeda has recruited individuals through associated religious and militant networks, including in Yemen and East Africa, and has engaged in armed hostilities against U.S., coalition, and Northern Alliance forces in Afghanistan.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
17 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
1 indicator attributed to this actor: domains, IPs, hashes, and other artifacts pulled from reporting. View more in app.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Cited as an example of an established foreign-based organized terrorist network, contrasted with increasingly decentralized online radicalization and self-directed violence.
Referenced as a global terrorist network used as a benchmark in discussion of U.S. counterterrorism priorities.
Referenced as a terrorist organization tied to pre-9/11 threat warnings.
Militant jihadist organization tied in the document to the 1998 U.S. embassy bombings in Nairobi and Dar es Salaam, training at al Farouq camp, front-line activity in Afghanistan, document forgery support in Karachi, and the 2002 Mombasa attacks.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.