Government Activity (TRBC 62)
Threat actors with at least one attributed targeting of this sector. Ranked by IDF score (rarity-weighted CVE attribution) with victim_count as tiebreaker. Hover the named-victim pills for evidence.
87 attributed actor(s) · 19 total named victim(s) (sum across actors) · 75 total attributed CVE(s)
| Actor | Category | Sponsor | Top named victims | Victims | CVEs | Techniques | IDF | Last active |
|---|---|---|---|---|---|---|---|---|
| Andariel (G0138) | state | 🇰🇵 KP | — | 0 | 11 | 18 | 31.9 | 2022 |
| Threat Group-3390 (G0027) | state | 🇨🇳 CN | — | 0 | 5 | 83 | 18.2 | 2026 |
| HAFNIUM (G0125) | state | 🇨🇳 CN | — | 0 | 3 | 66 | 12.9 | 2021 |
| Kimsuky (G0094) | state | 🇰🇵 KP | Korea Hydro & Nuclear Power CoUnited Nations | 2 | 3 | 171 | 10.6 | 2026 |
| Scarlet Mimic (G0029) | state | 🇨🇳 CN | — | 0 | 3 | 2 | 10.6 | 2022 |
| APT29 (G0016) | state | 🇷🇺 RU | Democratic National Committee | 1 | 3 | 96 | 9.1 | 2026 |
| APT19 (G0073) | unknown | — | — | 0 | 3 | 32 | 8.7 | 2021 |
| ZIRCONIUM (G0128) | state | 🇨🇳 CN | — | 0 | 2 | 42 | 7.9 | 2013 |
| MirrorFace (G1054) | unknown | — | — | 0 | 2 | 65 | 7.2 | 2023 |
| MuddyWater (G0069) | state | 🇮🇷 IR | — | 0 | 2 | 94 | 7.0 | 2026 |
| IndigoZebra (G0136) | state | 🇨🇳 CN | — | 0 | 2 | 12 | 6.4 | 2026 |
| Leviathan (G0065) | state | 🇨🇳 CN | — | 0 | 3 | 73 | 5.7 | 2026 |
| Ember Bear (G1003) | state | 🇷🇺 RU | — | 0 | 2 | 61 | 5.5 | 2026 |
| Fox Kitten (G0117) | state | 🇮🇷 IR | — | 0 | 2 | 54 | 5.5 | 2026 |
| Tonto Team (G0131) | state | 🇨🇳 CN | — | 0 | 2 | 23 | 5.5 | 2026 |
| Deep Panda (G0009) | state | 🇨🇳 CN | Anthem | 1 | 2 | 17 | 4.4 | 2021 |
| APT1 (G0006) | state | 🇨🇳 CN | — | 0 | 2 | 36 | 4.4 | 2021 |
| menuPass (G0045) | state | 🇨🇳 CN | — | 0 | 2 | 65 | 4.4 | 2021 |
| Cinnamon Tempest (G1021) | state | 🇨🇳 CN | — | 0 | 1 | 26 | 4.3 | 2023 |
| Sidewinder (G0121) | unknown | — | — | 0 | 1 | 42 | 4.3 | 2018 |
| Winter Vivern (G1035) | unknown | — | — | 0 | 1 | 36 | 4.3 | 2021 |
| Sandworm Team (G0034) | state | 🇷🇺 RU | Organisation for the Prohibition of Chemical Weapons | 1 | 2 | 109 | 3.9 | 2026 |
| Mustang Panda (G0129) | state-contractor | 🇨🇳 CN | — | 0 | 2 | 114 | 3.9 | 2026 |
| Elderwood (G0066) | state | 🇨🇳 CN | Google | 1 | 1 | 12 | 3.6 | 2026 |
| Lotus Blossom (G0030) | state | 🇨🇳 CN | — | 0 | 1 | 27 | 3.6 | 2022 |
| Nomadic Octopus (G0133) | unknown | — | — | 0 | 1 | 11 | 3.6 | 2026 |
| Ke3chang (G0004) | state | 🇨🇳 CN | — | 0 | 1 | 63 | 3.2 | 2026 |
| Naikon (G0019) | state | 🇨🇳 CN | United Nations Development Programme (UNDP)Association of Southeast Asian Nations (ASEAN) | 2 | 1 | 23 | 2.7 | 2022 |
| Aoqin Dragon (G1007) | state | 🇨🇳 CN | — | 0 | 1 | 13 | 2.7 | 2022 |
| Gamaredon Group (G0047) | state | 🇷🇺 RU | — | 0 | 1 | 91 | 2.7 | 2026 |
| Transparent Tribe (G0134) | state | 🇵🇰 PK | — | 0 | 1 | 23 | 2.7 | 2022 |
| APT28 (G0007) | state | 🇷🇺 RU | World Anti-Doping Agency (WADA)US Anti-Doping AgencyOrganization for the Prohibition of Chemical Weapons (OPCW)+4 more | 7 | 1 | 129 | 1.2 | 2026 |
| Ajax Security Team (G0130) | state | 🇮🇷 IR | — | 0 | 1 | 10 | 1.2 | 2026 |
| APT12 (G0005) | unknown | — | — | 0 | 1 | 9 | 1.2 | 2026 |
| Aquatic Panda (G0143) | state | 🇨🇳 CN | — | 0 | 1 | 49 | 1.2 | 2026 |
| OilRig (G0049) | state | 🇮🇷 IR | — | 0 | 1 | 103 | 1.2 | 2026 |
| Tropic Trooper (G0081) | state | 🇨🇳 CN | — | 0 | 1 | 56 | 1.2 | 2026 |
| VOID MANTICORE (G1055) | unknown | — | StrykerGovernment of Albania | 2 | 0 | 87 | 0.0 | — |
| AppleJeus (G1049) | state | 🇰🇵 KP | 3CX | 1 | 0 | 2 | 0.0 | — |
| Magic Hound (G0059) | state | 🇮🇷 IR | World Health Organization (WHO) | 1 | 0 | 109 | 0.0 | — |
| APT-C-23 (G1028) | unknown | — | — | 0 | 0 | 0 | 0.0 | — |
| APT-C-36 (G0099) | state | — | — | 0 | 0 | 54 | 0.0 | — |
| APT17 (G0025) | state | 🇨🇳 CN | — | 0 | 0 | 3 | 0.0 | — |
| APT18 (G0026) | state | 🇨🇳 CN | — | 0 | 0 | 18 | 0.0 | — |
| APT30 (G0013) | state | 🇨🇳 CN | — | 0 | 0 | 4 | 0.0 | — |
| APT5 (G1023) | state | 🇨🇳 CN | — | 0 | 0 | 42 | 0.0 | — |
| Axiom (G0001) | state | 🇨🇳 CN | — | 0 | 0 | 22 | 0.0 | — |
| BackdoorDiplomacy (G0135) | unknown | — | — | 0 | 0 | 21 | 0.0 | — |
| BITTER (G1002) | unknown | — | — | 0 | 0 | 26 | 0.0 | — |
| BRONZE BUTLER (G0060) | state | 🇨🇳 CN | — | 0 | 0 | 58 | 0.0 | — |
| Confucius (G0142) | unknown | — | — | 0 | 0 | 28 | 0.0 | — |
| CURIUM (G1012) | state | 🇮🇷 IR | — | 0 | 0 | 29 | 0.0 | — |
| Daggerfly (G1034) | state | 🇨🇳 CN | — | 0 | 0 | 30 | 0.0 | — |
| Darkhotel (G0012) | state | 🇰🇷 KR | — | 0 | 0 | 34 | 0.0 | — |
| DarkHydrus (G0079) | unknown | — | — | 0 | 0 | 12 | 0.0 | — |
| Dragonfly (G0035) | state | 🇷🇺 RU | — | 0 | 0 | 82 | 0.0 | — |
| Earth Lusca (G1006) | state | 🇨🇳 CN | — | 0 | 0 | 63 | 0.0 | — |
| GALLIUM (G0093) | state | 🇨🇳 CN | — | 0 | 0 | 45 | 0.0 | — |
| Gallmaker (G0084) | unknown | — | — | 0 | 0 | 11 | 0.0 | — |
| Gorgon Group (G0078) | state | 🇵🇰 PK | — | 0 | 0 | 23 | 0.0 | — |
| Higaisa (G0126) | unknown | — | — | 0 | 0 | 41 | 0.0 | — |
| LAPSUS$ (G1004) | unknown | — | — | 0 | 0 | 62 | 0.0 | — |
| Leafminer (G0077) | unknown | — | — | 0 | 0 | 26 | 0.0 | — |
| LuminousMoth (G1014) | unknown | — | — | 0 | 0 | 42 | 0.0 | — |
| Machete (G0095) | state | — | — | 0 | 0 | 17 | 0.0 | — |
| Mofang (G0103) | state | 🇨🇳 CN | — | 0 | 0 | 9 | 0.0 | — |
| Moses Staff (G1009) | unknown | — | — | 0 | 0 | 20 | 0.0 | — |
| MoustachedBouncer (G1019) | unknown | — | — | 0 | 0 | 11 | 0.0 | — |
| Patchwork (G0040) | state | 🇮🇳 IN | — | 0 | 0 | 63 | 0.0 | — |
| PLATINUM (G0068) | unknown | — | — | 0 | 0 | 15 | 0.0 | — |
| Play (G1040) | unknown | — | — | 0 | 0 | 35 | 0.0 | — |
| POLONIUM (G1005) | unknown | — | — | 0 | 0 | 11 | 0.0 | — |
| Saint Bear (G1031) | state | 🇷🇺 RU | — | 0 | 0 | 26 | 0.0 | — |
| SideCopy (G1008) | unknown | — | — | 0 | 0 | 25 | 0.0 | — |
| Silent Librarian (G0122) | state | 🇮🇷 IR | — | 0 | 0 | 20 | 0.0 | — |
| Sowbug (G0054) | state | — | — | 0 | 0 | 13 | 0.0 | — |
| Star Blizzard (G1033) | unknown | — | — | 0 | 0 | 31 | 0.0 | — |
| Stealth Falcon (G0038) | state | 🇦🇪 AE | — | 0 | 0 | 19 | 0.0 | — |
| TA2541 (G1018) | unknown | — | — | 0 | 0 | 42 | 0.0 | — |
| The White Company (G0089) | unknown | — | — | 0 | 0 | 12 | 0.0 | — |
| Thrip (G0076) | state | — | — | 0 | 0 | 8 | 0.0 | — |
| ToddyCat (G1022) | unknown | — | — | 0 | 0 | 38 | 0.0 | — |
| Turla (G0010) | state | 🇷🇺 RU | — | 0 | 0 | 92 | 0.0 | — |
| UNC3886 (G1048) | state | 🇨🇳 CN | — | 0 | 0 | 63 | 0.0 | — |
| Windigo (G0124) | unknown | — | — | 0 | 0 | 7 | 0.0 | — |
| Windshift (G0112) | unknown | — | — | 0 | 0 | 24 | 0.0 | — |
| WIRTE (G0090) | unknown | — | — | 0 | 0 | 42 | 0.0 | — |