THREAT

MON

APT HUNTER · TOURNAMENT EDITION

Hunt real-world APT groups.
Capture. Analyze. Defend.

A cybersecurity training game inspired by Pokemon — powered by real MITRE ATT&CK intelligence. 18 threat actors. 9 zones. Global leaderboard.

VIEW LEADERBOARD ↓
SCROLL TO EXPLORE ▼

NEW · FOR CLASSROOMS

A kid-friendly version
built for grades 3–5.

ThreatMon Jr teaches the same real-world defender skills as the main game — passwords, patching, phishing — through 9 chibi-style cyber villains and 3 simple power moves. No sign-up, no accounts, runs on any Chromebook or tablet.

🔐 STRONG LOCK🔧 FIX THE HOLES🔍 SPOT THE TRICK
🛡️✨

30-minute lesson

Lesson plan, exit ticket, standards crosswalk (ISTE · CSTA · Common Core · CASEL), and a no-screen card-deck backup.

No accounts · No data collection · COPPA-safe

◈ HOW IT WORKS

CYBERSECURITY TRAINING MEETS MONSTER COLLECTION

⚔️

Real APT Groups

18 threat actors based on real-world cyber campaigns — Cozy Bear, Scattered Spider, Salt Typhoon, Pegasus Operators, and more. Each with authentic TTPs.

🗺️

Explorable World

9 themed zones from SOC HQ to the Hacktivist Underground. Walk the overworld, encounter threats in tall grass, and battle rogue trainers.

📡

MITRE ATT&CK Intel

Every APT has a full dossier with real technique IDs, campaign history, and defender mitigations. Learn real threat intel while you play.

🏆

Global Leaderboard

Compete against threat hunters worldwide. Score based on captures, battle wins, and boss defeats. Cloudflare Turnstile-protected.

⬡ APT ROSTER

18 REAL-WORLD THREAT ACTORS — CAN YOU CATCH THEM ALL?

LV 8
Scattered Spider

Scattered Spider

UNC3944 / Octo Tempest

socialfinancial
LV 15
Cozy Bear

Cozy Bear

APT29 / Midnight Blizzard

nationespionage
LV 14
Lazarus Group

Lazarus Group

APT38 / Hidden Cobra

nationfinancial
LV 16
Fancy Bear

Fancy Bear

APT28 / STRONTIUM

nationespionage
LV 18
Sandworm

Sandworm

IRIDIUM / Voodoo Bear

nationespionage
LV 17
Volt Typhoon

Volt Typhoon

BRONZE SILHOUETTE

nationespionage
LV 11
FIN7

FIN7

Carbon Spider / ALPHV Affiliate

financialransomware
LV 9
LAPSUS$

LAPSUS$

DEV-0537 / Strawberry Tempest

socialfinancial

★ GLOBAL LEADERBOARD

TOP THREAT HUNTERS WORLDWIDE

LOADING...

NO ENTRIES YET — PLAY A GAME TO RANK