
| Last database change | 16 August 2025 |
| Total threat groups | 504 (416 APT, 54 other, 34 unknown) |
| Total group aliases | 1789 |
| Total operations | 2997 |
| Total counter operations | 274 |
| Unique source countries | 34 |
| Unique victim countries | 172 |
| Unique victim sectors | 42 |
| Unique tools | 2194 |
| Total tool aliases | 3328 |
| Unique external references | 9569 |
| Pos | Victim country | Count |
| 1 | 188 | |
| 2 | 112 | |
| 3 | 103 | |
| 4 | 102 | |
| 5 | 88 | |
| 6 | 85 | |
| 7 | 79 | |
| 79 | ||
| 9 | 75 | |
| 10 | 72 | |
| 11 | 71 | |
| 12 | 70 | |
| 13 | 65 | |
| 65 | ||
| 15 | 62 | |
| 16 | 61 | |
| 17 | 59 | |
| 59 | ||
| 19 | 58 | |
| 20 | 56 | |
| 56 | ||
| 22 | 54 | |
| 23 | 53 | |
| 24 | 52 | |
| 25 | 49 | |
| 26 | 48 | |
| 27 | 46 | |
| 28 | 45 | |
| 45 | ||
| 30 | 40 | |
| 31 | 38 | |
| 32 | 35 | |
| 35 | ||
| 35 |
| Pos | Source country | Count |
| 1 | 177 | |
| 2 | 52 | |
| 3 | 44 | |
| 4 | 14 | |
| 5 | 8 | |
| 6 | 7 | |
| 7 | 6 | |
| 8 | 4 | |
| 4 | ||
| 10 | 3 | |
| 3 | ||
| 3 | ||
| 3 | ||
| 3 | ||
| 3 | ||
| 16 | 2 | |
| 2 | ||
| 2 | ||
| 2 | ||
| 20 | 1 | |
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 | ||
| 1 |
| Pos | Tool | Count |
| 1 | Cobalt Strike | 67 |
| 2 | Mimikatz | 62 |
| 3 | Living off the Land | 58 |
| 4 | PlugX | 39 |
| 5 | PsExec | 31 |
| 6 | Poison Ivy | 26 |
| 7 | Gh0st RAT | 25 |
| 8 | njRAT | 22 |
| 9 | China Chopper | 20 |
| 10 | ProcDump | 19 |
| Pos | Victim sector | Count |
| 1 | Government | 204 |
| 2 | Defense | 117 |
| 3 | Financial | 108 |
| 4 | Telecommunications | 92 |
| 5 | Energy | 87 |
| 6 | Education | 80 |
| 7 | Media | 73 |
| 8 | Healthcare | 59 |
| Manufacturing | 59 | |
| 10 | IT | 43 |
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||