Mining, Quarrying, Oil & Gas Extraction (NAICS 21)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
25 attributed actor(s) · 5 total named victim(s) (sum across actors) · 210 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| menuPass (G0045) | state | 🇨🇳 CN | — | 0 | 52 | 65 | 123.5 | 2024 |
| Equation (G0020) | state | 🇺🇸 US | — | 0 | 36 | 7 | 90.4 | 2024 |
| APT19 (G0073) | unknown | — | — | 0 | 33 | 32 | 78.4 | 2024 |
| APT1 (G0006) | state | 🇨🇳 CN | — | 0 | 32 | 36 | 73.5 | 2024 |
| Dragonfly (G0035) | state | 🇷🇺 RU | — | 0 | 20 | 82 | 46.5 | 2026 |
| Fox Kitten (G0117) | state | 🇮🇷 IR | — | 0 | 11 | 54 | 26.1 | 2026 |
| Threat Group-3390 (G0027) | state | 🇨🇳 CN | — | 0 | 6 | 83 | 23.4 | 2026 |
| Inception (G0100) | state | 🇷🇺 RU | — | 0 | 9 | 34 | 22.6 | 2024 |
| MuddyWater (G0069) | state | 🇮🇷 IR | — | 0 | 5 | 94 | 14.4 | 2026 |
| Tonto Team (G0131) | state | 🇨🇳 CN | — | 0 | 2 | 23 | 6.6 | 2026 |
| LAPSUS$ (G1004) | criminal | — | MicrosoftOktaNVIDIA+2 more | 5 | 2 | 63 | 4.5 | 2022 |
| Ke3chang (G0004) | state | 🇨🇳 CN | — | 0 | 1 | 63 | 3.7 | 2026 |
| OilRig (G0049) | state | 🇮🇷 IR | — | 0 | 1 | 103 | 1.8 | 2026 |
| APT-C-36 (G0099) | state | — | — | 0 | 0 | 54 | 0.0 | — |
| APT17 (G0025) | state | 🇨🇳 CN | — | 0 | 0 | 3 | 0.0 | — |
| APT33 (G0064) | state | 🇮🇷 IR | — | 0 | 0 | 47 | 0.0 | — |
| BITTER (G1002) | state | 🇮🇳 IN | — | 0 | 0 | 26 | 0.0 | — |
| Cleaver (G0003) | state | 🇮🇷 IR | — | 0 | 0 | 10 | 0.0 | — |
| FIN10 (G0051) | unknown | — | — | 0 | 0 | 17 | 0.0 | — |
| HEXANE (G1001) | state | 🇮🇷 IR | — | 0 | 0 | 52 | 0.0 | — |
| Moses Staff (G1009) | hacktivist | 🇮🇷 IR | — | 0 | 0 | 20 | 0.0 | — |
| PittyTiger (G0011) | state | 🇨🇳 CN | — | 0 | 0 | 3 | 0.0 | — |
| Poseidon Group (G0033) | state | 🇧🇷 BR | — | 0 | 0 | 11 | 0.0 | — |
| Sea Turtle (G1041) | state | 🇹🇷 TR | — | 0 | 0 | 40 | 0.0 | — |
| TEMP.Veles (G0088) | state | 🇷🇺 RU | — | 0 | 0 | 0 | 0.0 | — |