Skip to content
Install MCP

Threat actor

IDEMIA

Last fetched

IDEMIA is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

IDEMIA, formerly known as Morpho, is a French multinational for advanced biometric and predictive analytics technologies often used for surveillance purposes. Its Traveler Analytics Suite is used to analyze passenger data, such as Passenger Name Records (PNR), at international borders. In the United States, IDEMIA provides products to various federal and state government entities and is the leading provider in the issuance of driver's licenses. The company owns IdentoGO, which operates hundreds of storefronts offering electronic fingerprint capture and other identity-related services. The ACLU of Massachusetts reported that IDEMIA released a new video analytics product called Augmented Vision, enabling cameras to analyze people and their movements in real-time. The system includes algorithms capable of recognizing faces, silhouettes, vehicles, number plates, and various objects. Notably, its automated "access control system" can identify a "person of interest," provide direct alerts, and automatically deny that person access to specific areas. According to Amnesty International, its facial recognition technology was sold to the Shanghai Public Security Bureau, contributing to China’s extensive surveillance infrastructure, including systems targeting Uyghurs and other minority groups in East Turkestan (renamed to Xinjiang by China.)

Techniques by tactic

No ATT&CK techniques are recorded for IDEMIA in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to IDEMIA today — this states the absence of a published link, not that IDEMIA has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from IDEMIA into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.