| Actor | Suspected sponsor | Asia-Pacific targets | Techniques | Incidents | News · 30d |
|---|---|---|---|---|---|
| Lazarus Group G1036 EU high
APT 38, APT-C-26, APT38, ATK117 … |
 North Korea |
AUCNHKINJPKRTH | 30 | 1 | 5 last Nov 9 |
| APT29 G0016 EU high
ATK7, Blue Kitsune, BlueBravo, COZY BEAR … |
 Russia |
CNINJPKR | 66 | 1 | 1 last Nov 9 |
| MuddyWater G0069
ATK51, Boggy Serpens, COBALT ULSTER, Earth Vetala … |
 Iran |
IN | 68 | — | — |
| Turla G0010 EU high
ATK13, BELUGASTURGEON, Blue Python, G0010 … |
Russia |
IN | 68 | — | — |
| WIZARD SPIDER G0102 EU high
DEV-0193, DEV-0237, FIN12, GOLD BLACKBURN … |
Russia |
AUINJPTW | 64 | — | — |
| APT27 G0027 EU high
BRONZE UNION, Budworm, Circle Typhoon, EMISSARY PANDA … |
 China |
AUCNINJPKRTHTW | 57 | — | — |
| APT10 G0045 EU high
ATK41, BRONZE RIVERSIDE, CVNX, Cicada … |
China |
AUINJPKRTH | 46 | — | — |
| APT15 G0004 EU high
BRONZE DAVENPORT, BRONZE IDLEWOOD, BRONZE PALACE, G0004 … |
China |
IN | 46 | — | — |
| TA505 G0092 EU high
ATK103, CHIMBORAZO, Dudear, G0092 … |
Russia |
AUINJPKRSGTH | 34 | — | — |
| ToddyCat G1022 EU high
Websiic |
— | IDINMYTHTWVN | 25 | — | — |
| APT1 G0006 EU high
Brown Fox, Byzantine Candor, COMMENT PANDA, Comment Crew … |
China |
INJPSGTW | 23 | — | — |
| Inception Framework G0100 EU high
ATK116, Blue Odin, Clean Ursa, Cloud Atlas … |
Russia |
INMYVN | 22 | — | — |
| BRONZE HIGHLAND G1034 EU medium
Daggerfly, Evasive Panda |
China |
HKINMOMYTW | 17 | — | — |
| Naikon G0019 EU medium
BRONZE GENEVA, BRONZE STERLING, Camerashy, G0013 … |
China |
CNIDINKHKRLAMMMY+4 | 14 | — | — |
| Beijing Group G0066 EU high
Elderwood, Elderwood Gang, G0066, SIG22 … |
China |
AUCNHKINTW | 9 | — | — |
| APT41 G0044 EU high
Amoeba, BARIUM, BRONZE ATLAS, BRONZE EXPORT … |
China |
CNHKINJPKRMMSGTH | 6 | — | — |
| Mofang G0103 EU high
BRONZE WALKER, Superman |
China |
INKRMMSG | 6 | — | — |
| Cleaver G0003 EU high
APT34, Alibaba, COBALT GYPSY, Cobalt Gypsy … |
Iran |
CNINKR | 5 | — | — |
| Equation Group G0020 EU medium
EQGRP, Equation, G0020, Tilded Team |
 United States |
CNIN | 4 | — | — |
| APT30 G0013 EU medium
G0013, ISTHMUS CASTLE |
China |
INKRMYTHVN | 2 | — | — |
| APT21 EU high
HAMMER PANDA, NetTraveler, TEMP.Zhenbao |
China |
CNINKRMN | — | — | — |
| Chamelgang EU medium
CamoFei |
— | INJPTW | — | — | — |
| Evasive Panda EU medium
BRONZE HIGHLAND |
China |
HKINMYTW | — | — | — |
| GOBLIN PANDA EU medium
Conimes, Cycldek |
China |
IDINJPKRMYPHVN | — | — | — |
| Hellsing EU medium | China |
IDINMYPH | — | — | — |
| Operation Parliament EU high | — | INKR | — | — | — |
| Red Dev 17 EU medium | China |
IN | — | — | — |
| Sandman APT EU high | China |
IN | — | — | — |
| Stealth Mango and Tangelo EU high |  Pakistan |
AUIN | — | — | — |
| TA406 EU high | North Korea |
CNINJPKR | — | — | — |
Sources: MISP galaxy threat-actor cluster (CC0/BSD) and MITRE ATT&CK® Enterprise, refreshed weekly. Sponsors and victims are those the sources attribute, with their uncertainty. News activity counts Asia-Pacific articles that name the actor or one of its aliases.