| Actor | Suspected sponsor | Asia-Pacific targets | Techniques | Incidents | News · 30d |
|---|---|---|---|---|---|
| APT32 G0050 EU high
APT 32, APT-32, APT-C-00, ATK17 … |
CNPHVN | 78 | — | — | |
| APT40 G0065 EU high
ATK29, BRONZE MOHAWK, G0065, GADOLINIUM … |
HKKHMYPH | 50 | — | — | |
| Earth Lusca G1006 EU high
AQUATIC PANDA, Aquatic Panda, BRONZE UNIVERSITY, BountyGlad … |
AUCNHKJPMNPHTHTW+1 | 44 | — | — | |
| LOTUS PANDA G0030 EU medium
ATK1, BRONZE ELGIN, Bilbug, Billbug … |
HKIDJPPHTWVN | 21 | — | — | |
| Naikon G0019 EU medium
BRONZE GENEVA, BRONZE STERLING, Camerashy, G0013 … |
CNIDINKHKRLAMMMY+4 | 14 | — | — | |
| GOBLIN PANDA EU medium
Conimes, Cycldek |
IDINJPKRMYPHVN | — | — | — | |
| Hellsing EU medium | IDINMYPH | — | — | — | |
| TianWu EU medium | CNHKPHTW | — | — | — |
Sources: MISP galaxy threat-actor cluster (CC0/BSD) and MITRE ATT&CK® Enterprise, refreshed weekly. Sponsors and victims are those the sources attribute, with their uncertainty. News activity counts Asia-Pacific articles that name the actor or one of its aliases.