Google Threat Intelligence Group’s unified actor-naming system will assign North Korea-attributed threat clusters the category word NEPTUNE as the second element of a two-word cryptonym. The first word will uniquely identify the tracked actor, while the second communicates origin, motivation, or activity type. Existing names, MITRE ATT&CK mappings, and vendor aliases will remain searchable, and early-stage clusters will continue to receive UNC designations.