Industrial & Commercial Services (TRBC 5220)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
32 attributed actor(s) · 8 total named victim(s) (sum across actors) · 32 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| Volt Typhoon (G1017) | state | 🇨🇳 CN | — | 0 | 4 | 98 | 15.6 | 2026 |
| HAFNIUM (G0125) | state | 🇨🇳 CN | — | 0 | 3 | 66 | 12.9 | 2021 |
| Equation (G0020) | state | 🇺🇸 US | — | 0 | 3 | 7 | 11.1 | 2022 |
| Kimsuky (G0094) | state | 🇰🇵 KP | Korea Hydro & Nuclear Power CoMinistry of UnificationUnited Nations | 3 | 3 | 171 | 10.6 | 2026 |
| APT29 (G0016) | state | 🇷🇺 RU | Democratic National CommitteeSolarWinds | 2 | 3 | 96 | 9.1 | 2026 |
| APT19 (G0073) | unknown | — | — | 0 | 3 | 32 | 8.7 | 2021 |
| Fox Kitten (G0117) | state | 🇮🇷 IR | — | 0 | 2 | 54 | 5.5 | 2026 |
| APT1 (G0006) | state | 🇨🇳 CN | — | 0 | 2 | 36 | 4.4 | 2021 |
| APT3 (G0022) | state-contractor | 🇨🇳 CN | — | 0 | 2 | 69 | 4.4 | 2021 |
| Akira (G1024) | criminal | — | — | 0 | 1 | 24 | 4.3 | 2023 |
| Mustang Panda (G0129) | state-contractor | 🇨🇳 CN | — | 0 | 2 | 114 | 3.9 | 2026 |
| Transparent Tribe (G0134) | state | 🇵🇰 PK | — | 0 | 1 | 23 | 2.7 | 2022 |
| Scattered Spider (G1015) | unknown | — | OktaAmazon Web ServicesOffice 365 | 3 | 1 | 84 | 1.2 | 2026 |
| FIN7 (G0046) | unknown | — | — | 0 | 1 | 93 | 1.2 | 2026 |
| GOLD SOUTHFIELD (G0115) | unknown | — | — | 0 | 1 | 12 | 1.2 | 2026 |
| admin@338 (G0018) | state | 🇨🇳 CN | — | 0 | 0 | 18 | 0.0 | — |
| APT-C-23 (G1028) | state | 🌍 PS | — | 0 | 0 | 0 | 0.0 | — |
| APT17 (G0025) | state | 🇨🇳 CN | — | 0 | 0 | 3 | 0.0 | — |
| APT33 (G0064) | state | 🇮🇷 IR | — | 0 | 0 | 47 | 0.0 | — |
| APT42 (G1044) | state | 🇮🇷 IR | — | 0 | 0 | 47 | 0.0 | — |
| BITTER (G1002) | state | 🇮🇳 IN | — | 0 | 0 | 26 | 0.0 | — |
| BlackOasis (G0063) | unknown | — | — | 0 | 0 | 1 | 0.0 | — |
| BlackTech (G0098) | state | 🇨🇳 CN | — | 0 | 0 | 20 | 0.0 | — |
| Contagious Interview (G1052) | state | 🇰🇵 KP | — | 0 | 0 | 71 | 0.0 | — |
| Dark Caracal (G0070) | state | 🌍 LB | — | 0 | 0 | 19 | 0.0 | — |
| Earth Lusca (G1006) | state | 🇨🇳 CN | — | 0 | 0 | 63 | 0.0 | — |
| Inception (G0100) | state | 🇷🇺 RU | — | 0 | 0 | 34 | 0.0 | — |
| Medusa Group (G1051) | unknown | — | — | 0 | 0 | 82 | 0.0 | — |
| Star Blizzard (G1033) | state | 🇷🇺 RU | — | 0 | 0 | 31 | 0.0 | — |
| Strider (G0041) | state | 🇺🇸 US | — | 0 | 0 | 6 | 0.0 | — |
| Turla (G0010) | state | 🇷🇺 RU | — | 0 | 0 | 92 | 0.0 | — |
| WIRTE (G0090) | state | 🌍 PS | — | 0 | 0 | 42 | 0.0 | — |