Transportation (TRBC 5230)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
17 attributed actor(s) · 0 total named victim(s) (sum across actors) · 204 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| menuPass (G0045) | state | 🇨🇳 CN | — | 0 | 52 | 65 | 123.5 | 2024 |
| Equation (G0020) | state | 🇺🇸 US | — | 0 | 36 | 7 | 90.4 | 2024 |
| Leviathan (G0065) | state | 🇨🇳 CN | — | 0 | 38 | 73 | 87.8 | 2026 |
| APT1 (G0006) | state | 🇨🇳 CN | — | 0 | 32 | 36 | 73.5 | 2024 |
| APT3 (G0022) | state-contractor | 🇨🇳 CN | — | 0 | 32 | 69 | 73.5 | 2024 |
| Volt Typhoon (G1017) | state | 🇨🇳 CN | — | 0 | 7 | 98 | 25.1 | 2026 |
| FIN7 (G0046) | unknown | — | — | 0 | 6 | 93 | 14.3 | 2026 |
| Tropic Trooper (G0081) | state | 🇨🇳 CN | — | 0 | 1 | 56 | 1.8 | 2026 |
| APT39 (G0087) | state | 🇮🇷 IR | — | 0 | 0 | 72 | 0.0 | — |
| Chimera (G0114) | state | 🇨🇳 CN | — | 0 | 0 | 82 | 0.0 | — |
| Cleaver (G0003) | state | 🇮🇷 IR | — | 0 | 0 | 10 | 0.0 | — |
| HEXANE (G1001) | state | 🇮🇷 IR | — | 0 | 0 | 52 | 0.0 | — |
| LazyScripter (G0140) | unknown | — | — | 0 | 0 | 30 | 0.0 | — |
| Moses Staff (G1009) | hacktivist | 🇮🇷 IR | — | 0 | 0 | 20 | 0.0 | — |
| RedEcho (G1042) | unknown | — | — | 0 | 0 | 8 | 0.0 | — |
| Storm-0501 (G1053) | unknown | — | — | 0 | 0 | 62 | 0.0 | — |
| TA2541 (G1018) | unknown | — | — | 0 | 0 | 42 | 0.0 | — |