Skip to content

targeted sector

Actors targeting Infrastructure

3 actors · source: MISP Galaxy

Every mark is an actor the MISP Galaxy (from the CFR Cyber Operations Tracker) lists against this sector. Red ones exploit a CVE in CISA KEV.

Every one of the 3 is a mark on the map. Named now: 1 to 3, most on record first.

  1. BRONZE BUTLERChina3 CVEs · 40 techniques · 14 software · 3 in CISA KEV
  2. MadiIranMISP Galaxy
  3. HellsingChinaMISP Galaxy

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.