Skip to content
BackEsc
Connect AISign inSign up free

targeted sector

Actors targeting Finance

25 actors · source: MISP Galaxy

Every mark is an actor the MISP Galaxy (from the CFR Cyber Operations Tracker) lists against this sector. Red ones exploit a CVE in CISA KEV.

Connect AI

Every one of the 25 is a mark on the map. Named now: 1 to 25, most on record first.

  1. APT41China11 CVEs · 82 techniques · 32 software · 10 in CISA KEV
  2. OilRigIran2 CVEs · 82 techniques · 30 software · 2 in CISA KEV
  3. Wizard SpiderRussia1 CVE · 64 techniques · 22 software · 1 in CISA KEV
  4. Graceful SpiderRussia34 techniques · 16 software
  5. PatchworkIndia6 CVEs · 41 techniques · 9 software · 6 in CISA KEV
  6. Blind EagleG009938 techniques · 9 software
  7. APT42Iran33 techniques · 2 software
  8. MoleratsPalestine16 techniques · 6 software
  9. TortoiseshellIran19 techniques · 1 software
  10. admin@338China1 CVE · 12 techniques · 7 software · 1 in CISA KEV
  11. APT-C-23Palestine3 techniques · 5 software
  12. Deep PandaChina10 techniques · 7 software
  13. POLONIUMLebanon7 techniques · 2 software
  14. FIN4Romania12 techniques
  15. NoName057(16)ActorCyberSIXT · MISP Galaxy
  16. Cotton SandstormIranMISP Galaxy
  17. LonghornUnited StatesMISP Galaxy
  18. MadiIranMISP Galaxy
  19. APT-C-12ActorMISP Galaxy
  20. BuhTrapRussiaMISP Galaxy
  21. GCMANRussia2 techniques
  22. AntlionChinaMISP Galaxy
  23. ANTHROPOID SPIDERActorMISP Galaxy
  24. SHARK SPIDERRussiaMISP Galaxy
  25. SOLAR SPIDERActorMISP Galaxy

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.

CyberSIXTSignal over noise
Sign inSign up free

Updated