European Union
Threats to the EU from Asia-Pacific
Threat actors based in the region whose known victims include EU member states, incidents in the region that touch the EU, and the EU's own projects in the sectors and countries that are targeted. Graded by rules, not by a model: every grade shows its reason.
26Actors from the region that target EU member states
35Actors of high EU relevance, any origin
81Incidents of high or medium EU relevance
47/ 75EU projects in targeted sectors
Actors from the region that target EU member states
All of high EU relevance →| Actor | Suspected sponsor | EU member states among its victims | Techniques | News · 30d |
|---|---|---|---|---|
| Lazarus Group G1036 1 incident on the register |
 North Korea |
FRDE | 30 | 5 |
| UTA0178 2 incidents on the register |
 China |
DE | — | 3 |
| APT17 G0001 | China |
BEDEITNL | 16 | 1 |
| Kimsuky G0094 | North Korea |
DE | 130 | 1 |
| MUSTANG PANDA G1014 | China |
DE | 28 | 1 |
| BRONZE SPRING | China |
BEDELTNLESSE | — | — |
| APT10 G0045 | China |
FIFRSE | 46 | — |
| APT1 G0006 | China |
BEFRLU | 23 | — |
| APT41 G0044 | China |
FRITNL | 6 | — |
| APT40 G0065 | China |
BEDE | 50 | — |
| Earth Lusca G1006 | China |
FRDE | 44 | — |
| APT14 | China |
DESE | — | — |
| APT21 | China |
DEES | — | — |
| TA406 | North Korea |
FRDE | — | — |
| APT32 G0050 |  Vietnam |
DE | 78 | — |
| APT27 G0027 | China |
FR | 57 | — |
| APT15 G0004 | China |
DE | 46 | — |
| Higaisa G0126 |  South Korea |
PL | 28 | — |
| HAZY TIGER G1002 |  India |
DE | 16 | — |
| Beijing Group G0066 | China |
DK | 9 | — |
| Mofang G0103 | China |
DE | 6 | — |
| DAGGER PANDA | China |
DE | — | — |
| Sandman APT | China |
FR | — | — |
| SharpPanda | China |
DE | — | — |
| Storm-0558 | China |
DE | — | — |
| VICEROY TIGER | India |
DE | — | — |
Where they come from actors by sponsor
Member states most often among the victims
Germany19
France8
Belgium4
Netherlands3
Sweden3
Italy2
Spain2
Lithuania1
Finland1
Luxembourg1
EU-relevant actors in the news 30 days
- Lazarus Group EU high · 5 articles, last Nov 9
- UTA0178 EU medium · 3 articles, last Nov 12
- APT17 EU high · 1 article, last Nov 11
- APT29 EU high · 1 article, last Nov 9
- Kimsuky EU medium · 1 article, last Oct 29
- MUSTANG PANDA EU medium · 1 article, last Nov 10
Incidents in the region that touch the EU
All 81 →- Elevated Virtual asset exchange Flybit hacked, resident registration numbers and tax information of 40 customers leaked EU medium Detected
- Elevated S. Korea, Belgium discuss leak of personal data of President Lee, Europe trip entourage EU high Detected
- Elevated CAAT says only 2 from 7 main Thai airlines affected by data breach EU medium Detected
- Moderate 300 Italian Schools Receive "From Taiwan" Bomb Threat Letters, Da-Yeh University Alumnus Account Suspected Hacked EU high Detected
- Moderate Dementia Singapore app users' personal data potentially compromised in cyber incident EU medium Detected
- Elevated VCAA investigating after website hacked during exam period EU medium Detected
- Elevated Phishing notification sent impersonating parking app 'Get your reward'... External agency breached EU medium Detected
- Elevated Kang Chiao International School Linkou campus network hacked; parents receive ransom letters, realize all personal data leaked EU medium Detected
- Elevated AFP probing into alleged Air Force data breach EU medium Detected
- Elevated Financial Security Institute reports data leak following hacking attack EU medium Detected
EU digital cooperation where cyber activity is highest
Cooperation portfolio →| Country | EU digital projects | Cyber news · 30d | Actors targeting | Physical |
|---|---|---|---|---|
| South Korea |
2 | 150 | 26 | Elevated |
 Taiwan |
1 | 82 | 22 | Elevated |
 Thailand |
1 | 79 | 9 | Elevated |
 Singapore |
2 | 66 | 8 | Elevated |
 Malaysia |
1 | 53 | 14 | Elevated |
 Cambodia |
1 | 48 | 4 | Elevated |
 Philippines |
2 | 33 | 8 | Elevated |
| Vietnam |
1 | 28 | 12 | Elevated |
 Indonesia |
1 | 28 | 6 | Elevated |
 Myanmar |
1 | 14 | 4 | High |
EU projects in targeted sectors 47 of 75 active or planned projects, most exposed first
How EU relevance is graded
Sources and method →High: the actor is under EU cyber sanctions, or its known victims include EU member states as well as Asia-Pacific countries; for an incident, EU member states were also affected, or the EU or one of its agencies is named in the response. Medium: it hits a sector in which the EU runs cooperation projects in the same country, or EU member states only. Everything else is low. The grades are recomputed every day from the profiles and the register.