Information (NAICS 51)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
100 attributed actor(s) · 19 total named victim(s) (sum across actors) · 535 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| APT41 (G0096) | state-contractor | 🇨🇳 CN | — | 0 | 52 | 115 | 123.5 | 2024 |
| menuPass (G0045) | state | 🇨🇳 CN | — | 0 | 52 | 65 | 123.5 | 2024 |
| Lazarus Group (G0032) | state | 🇰🇵 KP | Sony Pictures EntertainmentFEIB | 2 | 45 | 128 | 122.7 | 2025 |
| APT29 (G0016) | state | 🇷🇺 RU | Democratic National CommitteeSolarWinds | 2 | 40 | 96 | 98.5 | 2026 |
| Equation (G0020) | state | 🇺🇸 US | — | 0 | 36 | 7 | 90.4 | 2024 |
| Deep Panda (G0009) | state | 🇨🇳 CN | Anthem | 1 | 35 | 17 | 82.7 | 2024 |
| APT19 (G0073) | unknown | — | — | 0 | 33 | 32 | 78.4 | 2024 |
| APT1 (G0006) | state | 🇨🇳 CN | — | 0 | 32 | 36 | 73.5 | 2024 |
| APT3 (G0022) | state-contractor | 🇨🇳 CN | — | 0 | 32 | 69 | 73.5 | 2024 |
| Winnti Group (G0044) | state | 🇨🇳 CN | — | 0 | 32 | 8 | 73.5 | 2024 |
| HAFNIUM (G0125) | state | 🇨🇳 CN | — | 0 | 24 | 66 | 67.6 | 2022 |
| PROMETHIUM (G0056) | state | 🇹🇷 TR | — | 0 | 12 | 19 | 49.4 | 2022 |
| Sandworm Team (G0034) | state | 🇷🇺 RU | Organisation for the Prohibition of Chemical Weapons | 1 | 19 | 109 | 41.4 | 2026 |
| Ember Bear (G1003) | state | 🇷🇺 RU | — | 0 | 11 | 61 | 29.7 | 2026 |
| Akira (G1024) | criminal | — | — | 0 | 9 | 24 | 27.0 | 2024 |
| Fox Kitten (G0117) | state | 🇮🇷 IR | — | 0 | 11 | 54 | 26.1 | 2026 |
| Volt Typhoon (G1017) | state | 🇨🇳 CN | — | 0 | 7 | 98 | 25.1 | 2026 |
| Threat Group-3390 (G0027) | state | 🇨🇳 CN | — | 0 | 6 | 83 | 23.4 | 2026 |
| Salt Typhoon (G1045) | state | 🇨🇳 CN | — | 0 | 8 | 23 | 22.3 | 2026 |
| APT37 (G0067) | state | 🇰🇵 KP | — | 0 | 4 | 40 | 19.4 | 2016 |
| BlackByte (G1043) | criminal | — | — | 0 | 3 | 66 | 14.5 | 2026 |
| MuddyWater (G0069) | state | 🇮🇷 IR | — | 0 | 5 | 94 | 14.4 | 2026 |
| FIN7 (G0046) | unknown | — | — | 0 | 6 | 93 | 14.3 | 2026 |
| TA505 (G0092) | state | 🇷🇺 RU | — | 0 | 4 | 51 | 11.6 | 2026 |
| Tonto Team (G0131) | state | 🇨🇳 CN | — | 0 | 2 | 23 | 6.6 | 2026 |
| MirrorFace (G1054) | state | 🇨🇳 CN | — | 0 | 2 | 65 | 6.1 | 2023 |
| Cinnamon Tempest (G1021) | state | 🇨🇳 CN | — | 0 | 1 | 26 | 4.8 | 2023 |
| LAPSUS$ (G1004) | criminal | — | MicrosoftOktaNVIDIA+2 more | 5 | 2 | 63 | 4.5 | 2022 |
| Elderwood (G0066) | state | 🇨🇳 CN | Google | 1 | 1 | 12 | 4.2 | 2026 |
| Lotus Blossom (G0030) | state | 🇨🇳 CN | — | 0 | 1 | 27 | 4.2 | 2022 |
| Aoqin Dragon (G1007) | state | 🇨🇳 CN | — | 0 | 1 | 13 | 3.2 | 2022 |
| Scattered Spider (G1015) | unknown | — | OktaAmazon Web ServicesOffice 365 | 3 | 1 | 84 | 1.8 | 2026 |
| Indrik Spider (G0119) | state | 🇷🇺 RU | U.K.’s National Health Service (NHS) | 1 | 1 | 47 | 1.8 | 2026 |
| APT12 (G0005) | state | 🇨🇳 CN | — | 0 | 1 | 9 | 1.8 | 2026 |
| Aquatic Panda (G0143) | state | 🇨🇳 CN | — | 0 | 1 | 49 | 1.8 | 2026 |
| GOLD SOUTHFIELD (G0115) | unknown | — | — | 0 | 1 | 12 | 1.8 | 2026 |
| OilRig (G0049) | state | 🇮🇷 IR | — | 0 | 1 | 103 | 1.8 | 2026 |
| Wizard Spider (G0102) | state | 🇷🇺 RU | — | 0 | 1 | 92 | 1.8 | 2026 |
| AppleJeus (G1049) | state | 🇰🇵 KP | X_TRADER3CX | 2 | 0 | 2 | 0.0 | — |
| Magic Hound (G0059) | state | 🇮🇷 IR | World Health Organization | 1 | 0 | 109 | 0.0 | — |
| admin@338 (G0018) | state | 🇨🇳 CN | — | 0 | 0 | 18 | 0.0 | — |
| Agrius (G1030) | state | 🇮🇷 IR | — | 0 | 0 | 30 | 0.0 | — |
| APT-C-23 (G1028) | state | 🌍 PS | — | 0 | 0 | 0 | 0.0 | — |
| APT17 (G0025) | state | 🇨🇳 CN | — | 0 | 0 | 3 | 0.0 | — |
| APT18 (G0026) | state | 🇨🇳 CN | — | 0 | 0 | 18 | 0.0 | — |
| APT30 (G0013) | state | 🇨🇳 CN | — | 0 | 0 | 4 | 0.0 | — |
| APT32 (G0050) | state | 🇻🇳 VN | — | 0 | 0 | 106 | 0.0 | — |
| APT39 (G0087) | state | 🇮🇷 IR | — | 0 | 0 | 72 | 0.0 | — |
| APT42 (G1044) | state | 🇮🇷 IR | — | 0 | 0 | 47 | 0.0 | — |
| APT5 (G1023) | state | 🇨🇳 CN | — | 0 | 0 | 42 | 0.0 | — |
| Axiom (G0001) | state | 🇨🇳 CN | — | 0 | 0 | 22 | 0.0 | — |
| BackdoorDiplomacy (G0135) | unknown | — | — | 0 | 0 | 21 | 0.0 | — |
| BlackOasis (G0063) | unknown | — | — | 0 | 0 | 1 | 0.0 | — |
| BlackTech (G0098) | state | 🇨🇳 CN | — | 0 | 0 | 20 | 0.0 | — |
| Carbanak (G0008) | state | 🇷🇺 RU | — | 0 | 0 | 14 | 0.0 | — |
| Cleaver (G0003) | state | 🇮🇷 IR | — | 0 | 0 | 10 | 0.0 | — |
| Cobalt Group (G0080) | unknown | — | — | 0 | 0 | 52 | 0.0 | — |
| Contagious Interview (G1052) | state | 🇰🇵 KP | — | 0 | 0 | 71 | 0.0 | — |
| CopyKittens (G0052) | state | 🇮🇷 IR | — | 0 | 0 | 14 | 0.0 | — |
| CURIUM (G1012) | state | 🇮🇷 IR | — | 0 | 0 | 29 | 0.0 | — |
| Daggerfly (G1034) | state | 🇨🇳 CN | — | 0 | 0 | 30 | 0.0 | — |
| Dark Caracal (G0070) | state | 🌍 LB | — | 0 | 0 | 19 | 0.0 | — |
| DragonOK (G0017) | state | 🇨🇳 CN | — | 0 | 0 | 0 | 0.0 | — |
| Earth Lusca (G1006) | state | 🇨🇳 CN | — | 0 | 0 | 63 | 0.0 | — |
| EXOTIC LILY (G1011) | unknown | — | — | 0 | 0 | 22 | 0.0 | — |
| FIN8 (G0061) | unknown | — | — | 0 | 0 | 56 | 0.0 | — |
| GALLIUM (G0093) | state | 🇨🇳 CN | — | 0 | 0 | 45 | 0.0 | — |
| Group5 (G0043) | unknown | — | — | 0 | 0 | 7 | 0.0 | — |
| HEXANE (G1001) | state | 🇮🇷 IR | — | 0 | 0 | 52 | 0.0 | — |
| INC Ransom (G1032) | criminal | — | — | 0 | 0 | 34 | 0.0 | — |
| Machete (G0095) | state | — | — | 0 | 0 | 17 | 0.0 | — |
| Malteiro (G1026) | unknown | — | — | 0 | 0 | 19 | 0.0 | — |
| Medusa Group (G1051) | unknown | — | — | 0 | 0 | 82 | 0.0 | — |
| Metador (G1013) | unknown | — | — | 0 | 0 | 15 | 0.0 | — |
| Molerats (G0021) | state | 🌍 PS | — | 0 | 0 | 25 | 0.0 | — |
| Moonstone Sleet (G1036) | state | 🇰🇵 KP | — | 0 | 0 | 42 | 0.0 | — |
| Mustard Tempest (G1020) | unknown | — | — | 0 | 0 | 18 | 0.0 | — |
| Orangeworm (G0071) | unknown | — | — | 0 | 0 | 4 | 0.0 | — |
| Play (G1040) | criminal | — | — | 0 | 0 | 35 | 0.0 | — |
| POLONIUM (G1005) | state | 🌍 LB | — | 0 | 0 | 11 | 0.0 | — |
| Poseidon Group (G0033) | state | 🇧🇷 BR | — | 0 | 0 | 11 | 0.0 | — |
| RedEcho (G1042) | unknown | — | — | 0 | 0 | 8 | 0.0 | — |
| RTM (G0048) | unknown | — | — | 0 | 0 | 13 | 0.0 | — |
| Saint Bear (G1031) | state | 🇷🇺 RU | — | 0 | 0 | 26 | 0.0 | — |
| Sea Turtle (G1041) | state | 🇹🇷 TR | — | 0 | 0 | 40 | 0.0 | — |
| SilverTerrier (G0083) | state | 🌍 NG | — | 0 | 0 | 5 | 0.0 | — |
| Stealth Falcon (G0038) | state | 🇦🇪 AE | — | 0 | 0 | 19 | 0.0 | — |
| Storm-0501 (G1053) | unknown | — | — | 0 | 0 | 62 | 0.0 | — |
| Storm-1811 (G1046) | unknown | — | — | 0 | 0 | 47 | 0.0 | — |
| Strider (G0041) | state | 🇺🇸 US | — | 0 | 0 | 6 | 0.0 | — |
| TA577 (G1037) | state | 🇷🇺 RU | — | 0 | 0 | 11 | 0.0 | — |
| TA578 (G1038) | unknown | — | — | 0 | 0 | 7 | 0.0 | — |
| TEMP.Veles (G0088) | state | 🇷🇺 RU | — | 0 | 0 | 0 | 0.0 | — |
| Thrip (G0076) | state | — | — | 0 | 0 | 8 | 0.0 | — |
| Turla (G0010) | state | 🇷🇺 RU | — | 0 | 0 | 92 | 0.0 | — |
| UNC3886 (G1048) | state | 🇨🇳 CN | — | 0 | 0 | 63 | 0.0 | — |
| Volatile Cedar (G0123) | state | 🌍 LB | — | 0 | 0 | 7 | 0.0 | — |
| Water Galura (G1050) | unknown | — | — | 0 | 0 | 4 | 0.0 | — |
| Windigo (G0124) | unknown | — | — | 0 | 0 | 7 | 0.0 | — |
| WIRTE (G0090) | state | 🌍 PS | — | 0 | 0 | 42 | 0.0 | — |