Who is targeting critical infrastructure organisations?

Public reporting links 4 threat groups to attacks on critical infrastructure organisations, including APT41, POLONIUM and APT9. 2 of them are thought to have state backing. This page lists them and where they are thought to operate from, so you can see who might come after a business like yours.

Free to readNo account neededBuilt from public reporting

Threat groups linked
4
Sectors with their own page
3
Suspected state backing
2 of 4
Countries of origin
2
Built from public reporting about each group
Threat groups

Which groups target critical infrastructure organisations?

All 4 groups public reporting links to this sector. Open one to see who it is, how it works and the sources behind it.

Sectors inside

What counts as critical infrastructure?

Public reporting describes victims in many ways. These narrower sectors each have their own list of groups. Names that mean the same thing share one page.

FAQ

Questions about critical infrastructure organisations

Something else? Talk to the team →

Public reporting links 4 threat groups to attacks on critical infrastructure organisations, including APT41, POLONIUM, APT9 and BRONZE SPRING.

Most are thought to operate from China (3) and Lebanon (1). 2 of the 4 are thought to have backing from a government.

Public reporting describes critical infrastructure victims in several ways. The narrower sectors with groups of their own are industrial (3), construction (1) and emergency services (1).

Create an account and tell us the software you run. We match it against known flaws, rank each one from 0 to 100 using evidence it is being exploited, let you know as soon as something changes that affects you, and show which groups and ransomware gangs are hitting your sector.

Free account

Is your business on their list?

This page shows who targets critical infrastructure organisations. Your account shows what that means for you: we match the software you run to the flaws threat groups use, rank them 0 to 100 and tell you as soon as we spot something that affects you.

  • Over 900 group profiles in the app, every claim backed by a quote and a source link.
  • Your sector at a glance: which threat groups and ransomware gangs are hitting it.
  • Flaws in the software you run, ranked 0 to 100, with threat group activity counted in.
  • A PDF dossier on any group, ready to send to your board or your IT provider.
Get started

Know who targets your sector, and what to fix first.

Create a free account and tell us the software you run. We match the software you run against flaws threat groups use, rank them 0 to 100 and keep watching, so you hear about it as soon as we know.

No card neededNothing to installIntelligence and alerts free