| Actor | Suspected sponsor | Asia-Pacific targets | Techniques | Incidents | News · 30d |
|---|---|---|---|---|---|
| GreenSpot
APT-Q-20, PoisonVine |
 Taiwan |
— | — | — | — |
| GREF |  China |
— | — | — | — |
| GTG-1002 | China |
— | — | — | — |
| Hellsing EU medium | China |
IDINMYPH | — | — | — |
| HenBox | China |
— | — | — | — |
| Houken | China |
— | — | — | — |
| Houndstooth Typhoon
DRAGNET PANDA, HASSIUM, deepclif, isoon |
China |
— | — | — | — |
| HummingBad | China |
— | — | — | — |
| HURRICANE PANDA | China |
— | — | — | — |
| IcePeony | China |
— | — | — | — |
| IMPERSONATING PANDA | China |
— | — | — | — |
| INDOHAXSEC TEAM |  Indonesia |
— | — | — | — |
| Infy EU high
Foudre, Operation Mermaid, Prince of Persia |
 Iran |
CN | — | — | — |
| IronHusky | China |
— | — | — | — |
| JACKPOT PANDA | China |
— | — | — | — |
| JINX-0164 |  North Korea |
— | — | — | — |
| Larva-24005 | North Korea |
— | — | — | — |
| Lilac Typhoon
DEV-0234 |
China |
— | — | — | — |
| LIMINAL PANDA | China |
— | — | — | — |
| LongNosedGoblin | China |
— | — | — | — |
| Mana Team | China |
— | — | — | — |
| Moshen Dragon | China |
— | — | — | — |
| Nickel Alley | North Korea |
— | — | — | — |
| Night Dragon G0014
G0014 |
China |
— | — | — | — |
| NightEagle
APT-Q-95 |
 United States |
CN | — | — | — |
| Nitro
Covert Grove |
China |
— | — | — | — |
| OnionDog | North Korea |
KR | — | — | — |
| Opal Sleet
Konni, OSMIUM, Vedalia |
North Korea |
— | — | — | — |
| Operation DRBControl | China |
— | — | — | — |
| Operation Parliament EU high | — | INKR | — | — | — |
| Operation Red Signature | China |
— | — | — | — |
| Operation Shadow Force
Larva-24013, TA-ShadowCricket |
China |
— | — | — | — |
| PALE PANDA | China |
— | — | — | — |
| PassCV | China |
— | — | — | — |
| PerSwaysion |  Vietnam |
— | — | — | — |
| PlushDaemon | China |
— | — | — | — |
| POISONUS PANDA | China |
— | — | — | — |
| PREDATOR PANDA | China |
— | — | — | — |
| puNK-003 | North Korea |
— | — | — | — |
| PurpleHaze | China |
— | — | — | — |
Sources: MISP galaxy threat-actor cluster (CC0/BSD) and MITRE ATT&CK® Enterprise, refreshed weekly. Sponsors and victims are those the sources attribute, with their uncertainty. News activity counts Asia-Pacific articles that name the actor or one of its aliases.