Skip to content
Install MCP

Threat actor

EDGE NPD

Last fetched

EDGE NPD is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

EDGE NPD, a Polish software company, developed ABTShield, a tool designed to monitor online narratives and identify disinformation and foreign influence campaigns. ABTShield claims to offer a range of surveillance capabilities, including the ability to compile social media posts by keywords or topics, track specific social media accounts and analyze social reactions to news and articles. The tool reportedly collects data from platforms like Facebook, Twitter, Parler, and Telegram, as well as news sources, forums, and blogs. During a pilot with the Los Angeles Police Department (LAPD) in late 2020, the tool gathered millions of tweets related to topics such as Black Lives Matter and "defund the police" movements. The tool also vacuumed up data on the conflict between Armenia and Azerbaijan, citing Los Angeles' large Armenian population, and included usernames and geolocation data of the tweets it gathered. Known clients of ABTShield include the LAPD and the U.S. Embassy in Warsaw, which purchased licenses for the tool in 2020 and 2021.

Techniques by tactic

No ATT&CK techniques are recorded for EDGE NPD in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to EDGE NPD today — this states the absence of a published link, not that EDGE NPD has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from EDGE NPD into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.