Consumer Cyclicals (TRBC 53)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
39 attributed actor(s) · 10 total named victim(s) (sum across actors) · 30 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| Threat Group-3390 (G0027) | state | 🇨🇳 CN | — | 0 | 5 | 83 | 18.2 | 2026 |
| Kimsuky (G0094) | state | 🇰🇵 KP | Korea Hydro & Nuclear Power CoUnited Nations | 2 | 3 | 171 | 10.6 | 2026 |
| APT19 (G0073) | unknown | — | — | 0 | 3 | 32 | 8.7 | 2021 |
| MirrorFace (G1054) | unknown | — | — | 0 | 2 | 65 | 7.2 | 2023 |
| Leviathan (G0065) | state | 🇨🇳 CN | — | 0 | 3 | 73 | 5.7 | 2026 |
| APT38 (G0082) | state | 🇰🇵 KP | Bank of BangladeshBancomextBanco de Chile | 3 | 2 | 77 | 5.5 | 2026 |
| Fox Kitten (G0117) | state | 🇮🇷 IR | — | 0 | 2 | 54 | 5.5 | 2026 |
| APT41 (G0096) | state-contractor | 🇨🇳 CN | — | 0 | 2 | 115 | 4.4 | 2021 |
| menuPass (G0045) | state | 🇨🇳 CN | — | 0 | 2 | 65 | 4.4 | 2021 |
| Winnti Group (G0044) | state | 🇨🇳 CN | — | 0 | 2 | 8 | 4.4 | 2021 |
| Elderwood (G0066) | state | 🇨🇳 CN | Google | 1 | 1 | 12 | 3.6 | 2026 |
| Scattered Spider (G1015) | unknown | — | OktaAmazon Web ServicesOffice 365 | 3 | 1 | 83 | 1.2 | 2026 |
| APT12 (G0005) | unknown | — | — | 0 | 1 | 9 | 1.2 | 2026 |
| FIN7 (G0046) | unknown | — | — | 0 | 1 | 93 | 1.2 | 2026 |
| Magic Hound (G0059) | state | 🇮🇷 IR | World Health Organization (WHO) | 1 | 0 | 109 | 0.0 | — |
| APT-C-36 (G0099) | state | — | — | 0 | 0 | 54 | 0.0 | — |
| APT18 (G0026) | state | 🇨🇳 CN | — | 0 | 0 | 18 | 0.0 | — |
| APT32 (G0050) | state | 🇻🇳 VN | — | 0 | 0 | 106 | 0.0 | — |
| APT39 (G0087) | state | 🇮🇷 IR | — | 0 | 0 | 72 | 0.0 | — |
| Axiom (G0001) | state | 🇨🇳 CN | — | 0 | 0 | 22 | 0.0 | — |
| BlackOasis (G0063) | unknown | — | — | 0 | 0 | 1 | 0.0 | — |
| BlackTech (G0098) | state | 🇨🇳 CN | — | 0 | 0 | 20 | 0.0 | — |
| BRONZE BUTLER (G0060) | state | 🇨🇳 CN | — | 0 | 0 | 58 | 0.0 | — |
| CURIUM (G1012) | state | 🇮🇷 IR | — | 0 | 0 | 29 | 0.0 | — |
| Darkhotel (G0012) | state | 🇰🇷 KR | — | 0 | 0 | 34 | 0.0 | — |
| Earth Lusca (G1006) | state | 🇨🇳 CN | — | 0 | 0 | 63 | 0.0 | — |
| FIN13 (G1016) | unknown | — | — | 0 | 0 | 75 | 0.0 | — |
| FIN5 (G0053) | unknown | — | — | 0 | 0 | 16 | 0.0 | — |
| FIN6 (G0037) | unknown | — | — | 0 | 0 | 58 | 0.0 | — |
| FIN8 (G0061) | unknown | — | — | 0 | 0 | 56 | 0.0 | — |
| INC Ransom (G1032) | unknown | — | — | 0 | 0 | 34 | 0.0 | — |
| LAPSUS$ (G1004) | unknown | — | — | 0 | 0 | 62 | 0.0 | — |
| Mofang (G0103) | state | 🇨🇳 CN | — | 0 | 0 | 9 | 0.0 | — |
| Moses Staff (G1009) | unknown | — | — | 0 | 0 | 20 | 0.0 | — |
| Play (G1040) | unknown | — | — | 0 | 0 | 35 | 0.0 | — |
| POLONIUM (G1005) | unknown | — | — | 0 | 0 | 11 | 0.0 | — |
| SilverTerrier (G0083) | unknown | — | — | 0 | 0 | 5 | 0.0 | — |
| Stealth Falcon (G0038) | state | 🇦🇪 AE | — | 0 | 0 | 19 | 0.0 | — |
| TA2541 (G1018) | unknown | — | — | 0 | 0 | 42 | 0.0 | — |