Other Services (except Public Administration) (NAICS 81)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
14 attributed actor(s) · 4 total named victim(s) (sum across actors) · 18 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| HAFNIUM (G0125) | state | 🇨🇳 CN | — | 0 | 3 | 66 | 12.9 | 2021 |
| Kimsuky (G0094) | state | 🇰🇵 KP | Korea Hydro & Nuclear Power CoUnited Nations | 2 | 3 | 171 | 10.6 | 2026 |
| Scarlet Mimic (G0029) | state | 🇨🇳 CN | — | 0 | 3 | 2 | 10.6 | 2022 |
| APT29 (G0016) | state | 🇷🇺 RU | Democratic National Committee | 1 | 3 | 96 | 9.1 | 2026 |
| Winter Vivern (G1035) | unknown | — | — | 0 | 1 | 36 | 4.3 | 2021 |
| Mustang Panda (G0129) | state-contractor | 🇨🇳 CN | — | 0 | 2 | 114 | 3.9 | 2026 |
| Elderwood (G0066) | state | 🇨🇳 CN | Google | 1 | 1 | 12 | 3.6 | 2026 |
| Ke3chang (G0004) | state | 🇨🇳 CN | — | 0 | 1 | 63 | 3.2 | 2026 |
| Gamaredon Group (G0047) | state | 🇷🇺 RU | — | 0 | 1 | 91 | 2.7 | 2026 |
| BlackOasis (G0063) | unknown | — | — | 0 | 0 | 1 | 0.0 | — |
| Daggerfly (G1034) | state | 🇨🇳 CN | — | 0 | 0 | 30 | 0.0 | — |
| Patchwork (G0040) | state | 🇮🇳 IN | — | 0 | 0 | 63 | 0.0 | — |
| Star Blizzard (G1033) | unknown | — | — | 0 | 0 | 31 | 0.0 | — |
| Stealth Falcon (G0038) | state | 🇦🇪 AE | — | 0 | 0 | 19 | 0.0 | — |