Credit Intermediation & Related Activities (Banking) (NAICS 522)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
19 attributed actor(s) · 6 total named victim(s) (sum across actors) · 60 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| Lazarus Group (G0032) | state | 🇰🇵 KP | Sony Pictures EntertainmentFEIB | 2 | 45 | 128 | 122.7 | 2025 |
| Andariel (G0138) | state | 🇰🇵 KP | — | 0 | 11 | 18 | 30.4 | 2022 |
| APT38 (G0082) | state | 🇰🇵 KP | Bank of BangladeshBancomextBanco de Chile | 3 | 2 | 77 | 6.6 | 2026 |
| Indrik Spider (G0119) | state | 🇷🇺 RU | U.K.’s National Health Service (NHS) | 1 | 1 | 47 | 1.8 | 2026 |
| GOLD SOUTHFIELD (G0115) | unknown | — | — | 0 | 1 | 12 | 1.8 | 2026 |
| APT-C-23 (G1028) | state | 🌍 PS | — | 0 | 0 | 0 | 0.0 | — |
| Carbanak (G0008) | state | 🇷🇺 RU | — | 0 | 0 | 14 | 0.0 | — |
| Cobalt Group (G0080) | unknown | — | — | 0 | 0 | 52 | 0.0 | — |
| DarkVishnya (G0105) | unknown | — | — | 0 | 0 | 13 | 0.0 | — |
| FIN5 (G0053) | unknown | — | — | 0 | 0 | 16 | 0.0 | — |
| FIN6 (G0037) | unknown | — | — | 0 | 0 | 58 | 0.0 | — |
| Leafminer (G0077) | unknown | — | — | 0 | 0 | 26 | 0.0 | — |
| Malteiro (G1026) | unknown | — | — | 0 | 0 | 19 | 0.0 | — |
| RedCurl (G1039) | unknown | — | — | 0 | 0 | 60 | 0.0 | — |
| RTM (G0048) | unknown | — | — | 0 | 0 | 13 | 0.0 | — |
| Silence (G0091) | unknown | — | — | 0 | 0 | 43 | 0.0 | — |
| Strider (G0041) | state | 🇺🇸 US | — | 0 | 0 | 6 | 0.0 | — |
| TA459 (G0062) | state | 🇨🇳 CN | — | 0 | 0 | 8 | 0.0 | — |
| Water Galura (G1050) | unknown | — | — | 0 | 0 | 4 | 0.0 | — |