| Last database change | 20 October 2020 |
| Total threat groups | 329 (250 APT, 45 other, 34 unknown) |
| Total group aliases | 835 |
| Total operations | 1325 |
| Total counter operations | 90 |
| Unique source countries | 27 |
| Unique victim countries | 162 |
| Unique victim sectors | 42 |
| Unique tools | 1390 |
| Total tool aliases | 2032 |
| Unique external references | 5076 |
| Pos | Victim country | Count |
| 1 |  USA | 131 |
| 2 |  UK | 91 |
| 3 |  Russia | 79 |
| 4 |  Germany | 70 |
| 5 |  India | 68 |
| 6 |  China | 60 |
| 7 |  Canada | 55 |
 South Korea | 55 | |
| 9 |  Japan | 52 |
| 10 |  Turkey | 47 |
| 11 |  France | 46 |
| 12 |  Thailand | 43 |
 Ukraine | 43 | |
| 14 |  Taiwan | 42 |
| 15 |  Saudi Arabia | 40 |
 Australia | 40 | |
| 17 |  Pakistan | 39 |
| 18 |  Israel | 37 |
 UAE | 37 | |
| 20 |  Malaysia | 36 |
| 21 |  Italy | 35 |
 Iran | 35 | |
| 23 |  Brazil | 33 |
 Hong Kong | 33 | |
| 25 |  Vietnam | 32 |
| 26 |  Philippines | 31 |
 Netherlands | 31 |
| Pos | Source country | Count |
| 1 | China | 109 |
| 2 | Russia | 44 |
| 3 | Iran | 31 |
| 4 |  North Korea | 9 |
| 5 | USA | 8 |
| 6 | India | 5 |
| 7 | Turkey | 4 |
| 8 | Ukraine | 3 |
 Lebanon | 3 | |
| Pakistan | 3 | |
 Syria | 3 | |
| 12 | South Korea | 2 |
| 13 |  Tunisia | 1 |
| Vietnam | 1 | |
 Romania | 1 | |
| UK | 1 | |
 Mexico | 1 | |
 Libya | 1 | |
| Israel | 1 | |
| Brazil | 1 | |
 Uzbekistan | 1 | |
| France | 1 | |
| UAE | 1 | |
 Belarus | 1 | |
 Kazakhstan | 1 | |
| Italy | 1 | |
| Saudi Arabia | 1 |
| Pos | Tool | Count |
| 1 | Mimikatz | 42 |
| 2 | Living off the Land | 38 |
| 3 | PlugX | 29 |
| 4 | Cobalt Strike | 28 |
| 5 | Poison Ivy | 24 |
| 6 | Gh0st RAT | 22 |
| 7 | PsExec | 18 |
| 8 | njRAT | 14 |
| 9 | ProcDump | 11 |
| 10 | LaZagne | 10 |
| Pos | Victim sector | Count |
| 1 | Government | 140 |
| 2 | Defense | 87 |
| 3 | Financial | 81 |
| 4 | Energy | 61 |
| 5 | Media | 56 |
| Telecommunications | 56 | |
| 7 | Education | 43 |
| 8 | Healthcare | 40 |
| 9 | Manufacturing | 37 |
| 10 | High-Tech | 31 |
|
Thailand Computer Emergency Response Team (ThaiCERT) Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1234 | |
 |
report@thaicert.or.th | |
 |
Download PGP key | |