Loading threat actor…
Amber Drift is a fictional synthetic threat actor created for cyber threat intelligence exercises, testing, training, and documentation within the Synthetic Exercise World Format. It is identified as TA-704 Amber Drift, with an additional paired variant designated TA-714 Amber Drift. The actor is associated with the fictional country of Neruva Federation on the planet Nacre. Within that fictional setting, Neruva Federation is represented as an aerospace-focused country, with contextual references to delta megacities and ports and aerospace-linked companies. No verified real-world attribution, operational history, victimology, tooling, or tactics and techniques are established for Amber Drift beyond its role as a fictional exercise entity.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.
No news coverage yet. Advisories and community discussion only.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.