ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > Statistics

Threat Group Cards: A Threat Actor Encyclopedia

Database statistics

Last database change21 April 2025
Total threat groups498 (410 APT, 54 other, 34 unknown)
Total group aliases1551
Total operations2918
Total counter operations260
Unique source countries34
Unique victim countries172
Unique victim sectors42
Unique tools2176
Total tool aliases3308
Unique external references9387

Top 34 Victim countries

PosVictim countryCount
1USA USA188
2UK UK112
3India India102
 Russia Russia102
5Germany Germany88
6China China84
7South%20Korea South Korea78
8Thailand Thailand77
9Japan Japan74
10Canada Canada71
11Taiwan Taiwan69
 Turkey Turkey69
13France France65
14Vietnam Vietnam63
15Ukraine Ukraine60
16Australia Australia59
 Malaysia Malaysia59
18UAE UAE58
 Pakistan Pakistan58
20Israel Israel56
21Italy Italy54
22Philippines Philippines53
23Indonesia Indonesia52
24Brazil Brazil51
25Saudi%20Arabia Saudi Arabia49
26Hong%20Kong Hong Kong47
27Netherlands Netherlands46
28Spain Spain45
 Iran Iran45
30Singapore Singapore40
31Switzerland Switzerland38
32Sweden Sweden35
 Belgium Belgium35
 Poland Poland35

All Source countries

PosSource countryCount
1China China172
2Russia Russia51
3Iran Iran44
4North%20Korea North Korea13
5USA USA8
6Pakistan Pakistan7
7India India6
8Lebanon Lebanon4
 Turkey Turkey4
10Vietnam Vietnam3
 South%20Korea South Korea3
 Ukraine Ukraine3
 Belarus Belarus3
 Kazakhstan Kazakhstan3
 Syria Syria3
16UAE UAE2
 Israel Israel2
 Brazil Brazil2
19Tunisia Tunisia1
 Colombia Colombia1
 Romania Romania1
 UK UK1
 Mexico Mexico1
 Libya Libya1
 Yemen Yemen1
 Nigeria Nigeria1
 Uzbekistan Uzbekistan1
 France France1
 Singapore Singapore1
 Italy Italy1
 Spain Spain1
 Saudi%20Arabia Saudi Arabia1
 Indonesia Indonesia1
 Canada Canada1

Top 10 tools

PosToolCount
1Cobalt Strike66
2Mimikatz62
3Living off the Land58
4PlugX39
5PsExec31
6Poison Ivy26
7Gh0st RAT25
8njRAT22
9China Chopper20
10ProcDump19

Top 10 Victim sectors

PosVictim sectorCount
1Government201
2Defense116
3Financial107
4Telecommunications90
5Energy87
6Education78
7Media72
8Manufacturing59
9Healthcare58
10IT41

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]