Who is targeting tech organisations?
Public reporting links 13 threat groups to attacks on tech organisations, part of the technology and telecoms industry, including Grayling, Tortoiseshell and AridViper. 10 of them are thought to have state backing. This page lists them and where they are thought to operate from, so you can see who might come after a business like yours.
Free to readNo account neededBuilt from public reporting
- Threat groups linked
- 13
- Related sectors with groups
- 6
- Suspected state backing
- 10 of 13
- Countries of origin
- 4
Which groups target tech organisations?
All 13 groups public reporting links to this sector. Open one to see who it is, how it works and the sources behind it.
- CNGraylingThought to operate from China · Suspected state backing
- IRTortoiseshellThought to operate from Iran · Suspected state backing
- PSAridViperThought to operate from Palestinian Territories · Suspected state backing
- IRLYCEUMThought to operate from Iran · Suspected state backing
- CNAPT41Thought to operate from China · Suspected state backing
- LBPOLONIUMThought to operate from Lebanon · Suspected state backing
- CNEarth BerberokaThought to operate from China
- CNBRONZE SPRINGThought to operate from China
- CNTianWuThought to operate from China · Suspected state backing
- CNRed Dev 17Thought to operate from China
- CNRedGolfThought to operate from China · Suspected state backing
- IRCotton SandstormThought to operate from Iran · Suspected state backing
- IRBANISHED KITTENThought to operate from Iran · Suspected state backing
Other sectors in technology and telecoms
Groups that target one part of an industry often target its neighbours. These sectors each have groups of their own.
Public reporting links 13 threat groups to attacks on tech organisations, including Grayling, Tortoiseshell, AridViper, LYCEUM and APT41.
Most are thought to operate from China (7), Iran (4) and Palestinian Territories (1). 10 of the 13 are thought to have backing from a government.
Tech sits within technology and telecoms. The industry page lists every group linked to the wider sector.
Create an account and tell us the software you run. We match it against known flaws, rank each one from 0 to 100 using evidence it is being exploited, let you know as soon as something changes that affects you, and show which groups and ransomware gangs are hitting your sector.
Is your business on their list?
This page shows who targets tech organisations. Your account shows what that means for you: we match the software you run to the flaws threat groups use, rank them 0 to 100 and tell you as soon as we spot something that affects you.
- Over 900 group profiles in the app, every claim backed by a quote and a source link.
- Your sector at a glance: which threat groups and ransomware gangs are hitting it.
- Flaws in the software you run, ranked 0 to 100, with threat group activity counted in.
- A PDF dossier on any group, ready to send to your board or your IT provider.
Know who targets your sector, and what to fix first.
Create a free account and tell us the software you run. We match the software you run against flaws threat groups use, rank them 0 to 100 and keep watching, so you hear about it as soon as we know.
No card neededNothing to installIntelligence and alerts free