Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT37 [Date of discovery] APT37, suspected to originate from North Korea, primarily targets South Korea, Japan, Vietnam, and the Middle East across various industry verticals. Their operations are expanding in scope and sophistication, with access to zero-day vulnerabilities and…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT38 [Date of discovery] APT38 is a regime-backed threat group responsible for conducting some of the largest cyber heists in history. They target financial institutions worldwide, utilizing sophisticated tactics and malware. APT38 is distinct from other North Korean cyber…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT1 [Date of discovery] APT1, also known as Unit 61398 or Comment Crew, is suspected to originate from China’s People’s Liberation Army (PLA) General Staff Department’s 3rd Department. The group systematically steals data from various sectors, demonstrating the capability…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT2 [Date of discovery] APT2, suspected to originate from China, targets military and aerospace sectors. They engage in intellectual property theft, focusing on data and projects that make organizations competitive. APT2’s attack vectors include spearphishing emails exploiting CVE-2012-0158. High…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT10 [Date of discovery] APT10, also known as Menupass Team, is a Chinese cyber espionage group suspected to originate from China. They have historically targeted construction and engineering, aerospace, and telecom firms, as well as governments in the United…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT14 [Date of discovery] APT14, suspected to be attributed to China, engages in cyber operations targeting government, telecommunications, and construction and engineering sectors. The group focuses on data theft, with particular interest in military and maritime equipment, operations, and…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT4 [Date of discovery] APT4, also known as Maverick Panda or Sykipot Group, is a cyber threat believed to originate from China. APT4 targets various sectors including aerospace, defense, industrial engineering, electronics, automotive, government, telecommunications, and transportation. They often…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT5 [Date of discovery] APT5, believed to originate from China, has been active since at least 2007, targeting regional telecommunication providers, technology firms, high-tech manufacturing, and military technology in the U.S., Europe, and Asia. The group focuses on data…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT7 [Date of discovery] APT7, suspected to originate from China, engages in cyber operations focused on intellectual property theft, particularly targeting organizations in sectors such as construction, engineering, aerospace, and defense. The group utilizes various attack vectors, including lateral…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT8 [Date of discovery] APT8, possibly originating from China, engages in cyber operations focused on intellectual property theft, primarily targeting organizations in sectors such as media, entertainment, construction, engineering, aerospace, and defense. The group utilizes various attack vectors, including…