| Last database change | 23 April 2021 |
| Total threat groups | 363 (279 APT, 45 other, 39 unknown) |
| Total group aliases | 949 |
| Total operations | 1598 |
| Total counter operations | 102 |
| Unique source countries | 28 |
| Unique victim countries | 165 |
| Unique victim sectors | 42 |
| Unique tools | 1489 |
| Total tool aliases | 2179 |
| Unique external references | 5614 |
| Pos | Victim country | Count |
| 1 |  USA | 141 |
| 2 |  UK | 95 |
| 3 |  Russia | 83 |
| 4 |  Germany | 74 |
 India | 74 | |
| 6 |  China | 66 |
| 7 |  Canada | 60 |
| 8 |  South Korea | 58 |
| 9 |  Japan | 54 |
| 10 |  Turkey | 52 |
| 11 |  France | 50 |
| 12 |  Australia | 46 |
 Taiwan | 46 | |
 Thailand | 46 | |
| 15 |  Ukraine | 45 |
| 16 |  Pakistan | 42 |
| 17 |  Israel | 40 |
 Saudi Arabia | 40 | |
 UAE | 40 | |
| 20 |  Italy | 39 |
 Vietnam | 39 | |
 Malaysia | 39 | |
| 23 |  Iran | 37 |
| 24 |  Hong Kong | 36 |
| 25 |  Brazil | 35 |
 Netherlands | 35 | |
| 27 |  Indonesia | 33 |
| 28 |  Spain | 32 |
| Pos | Source country | Count |
| 1 | China | 112 |
| 2 | Russia | 47 |
| 3 | Iran | 32 |
| 4 |  North Korea | 10 |
| 5 | USA | 8 |
| 6 | India | 6 |
| 7 | Turkey | 4 |
| 8 | Ukraine | 3 |
 Lebanon | 3 | |
| Pakistan | 3 | |
 Syria | 3 | |
| 12 | Vietnam | 2 |
| South Korea | 2 | |
 Kazakhstan | 2 | |
| Israel | 2 | |
| 16 |  Tunisia | 1 |
 Romania | 1 | |
| UK | 1 | |
 Mexico | 1 | |
 Libya | 1 | |
| Brazil | 1 | |
 Uzbekistan | 1 | |
| France | 1 | |
| UAE | 1 | |
 Belarus | 1 | |
| Italy | 1 | |
| Saudi Arabia | 1 | |
| Indonesia | 1 |
| Pos | Tool | Count |
| 1 | Mimikatz | 43 |
| 2 | Living off the Land | 39 |
| 3 | Cobalt Strike | 33 |
| 4 | PlugX | 29 |
| 5 | Poison Ivy | 24 |
| 6 | Gh0st RAT | 22 |
| 7 | PsExec | 19 |
| 8 | njRAT | 16 |
| 9 | LaZagne | 11 |
| ProcDump | 11 |
| Pos | Victim sector | Count |
| 1 | Government | 146 |
| 2 | Defense | 90 |
| 3 | Financial | 83 |
| 4 | Energy | 63 |
| 5 | Telecommunications | 57 |
| 6 | Media | 56 |
| 7 | Education | 47 |
| 8 | Healthcare | 43 |
| 9 | Manufacturing | 37 |
| 10 | High-Tech | 31 |
|
Thailand Computer Emergency Response Team (ThaiCERT) Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1234 | |
 |
report@thaicert.or.th | |
 |
Download PGP key | |