Shane Huntley, Google's Threat Intelligence Group CTO, said the revamp was necessary to bring clarity to security researchers. He explained that when companies started publishing reports on cyberattacks and naming hackers in the early 2010s, they didn't expect as many threat groups as we have today. Now, Google tracks over 5,000 "activity clusters" across multiple countries.