Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT38 [Date of discovery] APT38 is a regime-backed threat group responsible for conducting some of the largest cyber heists in history. They target financial institutions worldwide, utilizing sophisticated tactics and malware. APT38 is distinct from other North Korean cyber…

Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT41 [Date of discovery] Chinese state-sponsored cyber espionage and financially motivated cyber crime targeting various sectors including healthcare, telecoms, high-tech, video game industry, higher education, travel services, and news/media firms. Very high impact Servers, End-user systems, Network infrastructure Ongoing,…

Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT23 [Date of discovery] APT23, attributed to China, targets media and government sectors in the U.S. and the Philippines, stealing information with political and military significance. They primarily use spear phishing messages with education-related lures. Associated malware includes NONGMIN….

Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT7 [Date of discovery] APT7, suspected to originate from China, engages in cyber operations focused on intellectual property theft, particularly targeting organizations in sectors such as construction, engineering, aerospace, and defense. The group utilizes various attack vectors, including lateral…