🔌 Critical Infrastructure | Threat Actor Index

Tactic Coverage

Tactics used by Critical Infrastructure-targeting groups

Command & Control

8

Stealth

8

Execution

8

Initial Access

8

Discovery

7

Persistence

7

Privilege Escalation

7

Resource Development

7

Defence Impairment

6

Lateral Movement

6

Nation Attribution

Origin of groups targeting this sector

Unattributed

3

Russia

3

China

3

Iran

1

🔌 Critical Infrastructure Groups

BRONZE SILHOUETTE, Vanguard Panda, DEV-0391

🇨🇳 China 81 techniques 17 software

COBALT MYSTIQUE, Handala Hack, Homeland Justice

🇮🇷 Iran 63 techniques 0 software

TEMP.Isotope, DYMALLOY, Berserk Bear

🇷🇺 Russia 56 techniques 10 software

48 techniques 8 software

UNC2589, Bleeding Bear, DEV-0586

🇷🇺 Russia 47 techniques 11 software

26 techniques 9 software

19 techniques 1 software

🇨🇳 China 6 techniques 2 software

🇨🇳 China 5 techniques 1 software

🇷🇺 Russia 0 techniques 2 software

↑