Accommodation & Food Services (NAICS 72)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
9 attributed actor(s) · 3 total named victim(s) (sum across actors) · 16 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| Darkhotel (G0012) | state | 🇰🇷 KR | — | 0 | 9 | 34 | 19.5 | 2024 |
| FIN7 (G0046) | unknown | — | — | 0 | 6 | 93 | 14.3 | 2026 |
| Scattered Spider (G1015) | unknown | — | OktaAmazon Web ServicesOffice 365 | 3 | 1 | 84 | 1.8 | 2026 |
| APT32 (G0050) | state | 🇻🇳 VN | — | 0 | 0 | 106 | 0.0 | — |
| APT39 (G0087) | state | 🇮🇷 IR | — | 0 | 0 | 72 | 0.0 | — |
| FIN13 (G1016) | state | 🇷🇺 RU | — | 0 | 0 | 75 | 0.0 | — |
| FIN5 (G0053) | unknown | — | — | 0 | 0 | 16 | 0.0 | — |
| FIN6 (G0037) | unknown | — | — | 0 | 0 | 58 | 0.0 | — |
| FIN8 (G0061) | unknown | — | — | 0 | 0 | 56 | 0.0 | — |