Threat Groups represent organized entities that conduct cyber operations with ideological, political, financial, or strategic motives. This category includes nation-state APTs, hacktivist collectives, cybercriminal gangs, and hybrid actors. These groups utilize distinct tactics, techniques, and procedures (TTPs) to target governments, enterprises, critical infrastructure, and public services.