Financials (TRBC 55)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
39 attributed actor(s) · 9 total named victim(s) (sum across actors) · 34 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| Andariel (G0138) | state | 🇰🇵 KP | — | 0 | 11 | 18 | 31.9 | 2022 |
| APT19 (G0073) | unknown | — | — | 0 | 3 | 32 | 8.7 | 2021 |
| MirrorFace (G1054) | unknown | — | — | 0 | 2 | 65 | 7.2 | 2023 |
| MuddyWater (G0069) | state | 🇮🇷 IR | — | 0 | 2 | 94 | 7.0 | 2026 |
| APT38 (G0082) | state | 🇰🇵 KP | Bank of BangladeshBancomextBanco de Chile | 3 | 2 | 77 | 5.5 | 2026 |
| Tonto Team (G0131) | state | 🇨🇳 CN | — | 0 | 2 | 23 | 5.5 | 2026 |
| Deep Panda (G0009) | state | 🇨🇳 CN | Anthem | 1 | 2 | 17 | 4.4 | 2021 |
| APT41 (G0096) | state-contractor | 🇨🇳 CN | — | 0 | 2 | 115 | 4.4 | 2021 |
| menuPass (G0045) | state | 🇨🇳 CN | — | 0 | 2 | 65 | 4.4 | 2021 |
| Cinnamon Tempest (G1021) | state | 🇨🇳 CN | — | 0 | 1 | 26 | 4.3 | 2023 |
| TeamTNT (G0139) | unknown | — | — | 0 | 1 | 75 | 4.3 | 2019 |
| Scattered Spider (G1015) | unknown | — | OktaAmazon Web ServicesOffice 365 | 3 | 1 | 83 | 1.2 | 2026 |
| FIN7 (G0046) | unknown | — | — | 0 | 1 | 93 | 1.2 | 2026 |
| Indrik Spider (G0119) | state | 🇷🇺 RU | — | 0 | 1 | 47 | 1.2 | 2026 |
| OilRig (G0049) | state | 🇮🇷 IR | — | 0 | 1 | 103 | 1.2 | 2026 |
| AppleJeus (G1049) | state | 🇰🇵 KP | 3CX | 1 | 0 | 2 | 0.0 | — |
| Silence (G0091) | unknown | — | Russian Central Bank | 1 | 0 | 43 | 0.0 | — |
| admin@338 (G0018) | state | 🇨🇳 CN | — | 0 | 0 | 18 | 0.0 | — |
| APT-C-36 (G0099) | state | — | — | 0 | 0 | 54 | 0.0 | — |
| BlackTech (G0098) | state | 🇨🇳 CN | — | 0 | 0 | 20 | 0.0 | — |
| Blue Mockingbird (G0108) | unknown | — | — | 0 | 0 | 35 | 0.0 | — |
| Carbanak (G0008) | state | 🇷🇺 RU | — | 0 | 0 | 14 | 0.0 | — |
| Cobalt Group (G0080) | unknown | — | — | 0 | 0 | 52 | 0.0 | — |
| Contagious Interview (G1052) | unknown | — | — | 0 | 0 | 71 | 0.0 | — |
| DarkVishnya (G0105) | unknown | — | — | 0 | 0 | 13 | 0.0 | — |
| Earth Lusca (G1006) | state | 🇨🇳 CN | — | 0 | 0 | 63 | 0.0 | — |
| FIN13 (G1016) | unknown | — | — | 0 | 0 | 75 | 0.0 | — |
| FIN4 (G0085) | state | 🇷🇴 RO | — | 0 | 0 | 20 | 0.0 | — |
| FIN5 (G0053) | unknown | — | — | 0 | 0 | 16 | 0.0 | — |
| FIN6 (G0037) | unknown | — | — | 0 | 0 | 58 | 0.0 | — |
| FIN8 (G0061) | unknown | — | — | 0 | 0 | 56 | 0.0 | — |
| GALLIUM (G0093) | state | 🇨🇳 CN | — | 0 | 0 | 45 | 0.0 | — |
| Malteiro (G1026) | unknown | — | — | 0 | 0 | 19 | 0.0 | — |
| Moses Staff (G1009) | unknown | — | — | 0 | 0 | 20 | 0.0 | — |
| RedCurl (G1039) | unknown | — | — | 0 | 0 | 60 | 0.0 | — |
| Rocke (G0106) | unknown | — | — | 0 | 0 | 50 | 0.0 | — |
| RTM (G0048) | unknown | — | — | 0 | 0 | 13 | 0.0 | — |
| Water Galura (G1050) | unknown | — | — | 0 | 0 | 4 | 0.0 | — |
| WIRTE (G0090) | unknown | — | — | 0 | 0 | 42 | 0.0 | — |