ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > Statistics

Threat Group Cards: A Threat Actor Encyclopedia

Database statistics

Last database change02 July 2025
Total threat groups504 (416 APT, 54 other, 34 unknown)
Total group aliases1640
Total operations2965
Total counter operations267
Unique source countries34
Unique victim countries172
Unique victim sectors42
Unique tools2192
Total tool aliases3326
Unique external references9495

Top 34 Victim countries

PosVictim countryCount
1USA USA188
2UK UK112
3India India103
4Russia Russia102
5Germany Germany88
6China China85
7South%20Korea South Korea79
 Thailand Thailand79
9Japan Japan75
10Canada Canada72
11Taiwan Taiwan71
12Turkey Turkey69
13France France65
 Vietnam Vietnam65
15Ukraine Ukraine62
16Malaysia Malaysia61
17UAE UAE59
 Australia Australia59
19Pakistan Pakistan58
20Israel Israel56
 Philippines Philippines56
22Italy Italy54
23Indonesia Indonesia53
24Brazil Brazil52
25Saudi%20Arabia Saudi Arabia49
26Hong%20Kong Hong Kong48
27Netherlands Netherlands46
28Spain Spain45
 Iran Iran45
30Singapore Singapore40
31Switzerland Switzerland38
32Sweden Sweden35
 Belgium Belgium35
 Poland Poland35

All Source countries

PosSource countryCount
1China China177
2Russia Russia52
3Iran Iran44
4North%20Korea North Korea14
5USA USA8
6Pakistan Pakistan7
7India India6
8Lebanon Lebanon4
 Turkey Turkey4
10Vietnam Vietnam3
 South%20Korea South Korea3
 Ukraine Ukraine3
 Belarus Belarus3
 Kazakhstan Kazakhstan3
 Syria Syria3
16UAE UAE2
 Spain Spain2
 Israel Israel2
 Brazil Brazil2
20Tunisia Tunisia1
 Colombia Colombia1
 Romania Romania1
 UK UK1
 Mexico Mexico1
 Libya Libya1
 Yemen Yemen1
 Nigeria Nigeria1
 Uzbekistan Uzbekistan1
 France France1
 Singapore Singapore1
 Italy Italy1
 Saudi%20Arabia Saudi Arabia1
 Indonesia Indonesia1
 Canada Canada1

Top 10 tools

PosToolCount
1Cobalt Strike67
2Mimikatz62
3Living off the Land58
4PlugX39
5PsExec31
6Poison Ivy26
7Gh0st RAT25
8njRAT22
9China Chopper20
10ProcDump19

Top 10 Victim sectors

PosVictim sectorCount
1Government204
2Defense117
3Financial108
4Telecommunications92
5Energy87
6Education80
7Media73
8Healthcare59
 Manufacturing59
10IT43

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]