attribution_id,incident_id,attribution_year,attribution_month,attribution_day,attribution_date,attribution_basis,attribution_type,attribution_subtype,attribution_country,attribution_actor,attribution_company 17416,2,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Azerbaijan,Not available,Not available 17417,3,2000.0,2.0,,2000-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Armenia,Liazor,Not available 17418,4,2000.0,5.0,20.0,2000-5-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,China,Not available,Not available 17421,5,2001.0,4.0,,2001-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,China,Honker Union of China,Not available 6,6,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 7,7,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 8661,8,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 8662,9,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 10,10,2013.0,,,2013,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 11,11,2005.0,,,2005,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 12,11,2005.0,,,2005,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 15,13,2009.0,,,2009,Attribution by third-party,"Attribution given, type unclear",Not available,Not available,Not available,Not available 8665,14,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 8666,14,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 18,15,2004.0,,,2004,Attribution by third-party,"Attribution given, type unclear",Not available,Not available,Not available,Not available 8676,16,2015.0,,,2015,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 8677,16,2015.0,,,2015,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 8371,17,,,,Not available,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 22,18,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6712,19,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 24,20,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 25,21,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 26,21,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 27,22,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 28,22,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1750,23,2014.0,1.0,1.0,2014-1-1,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 30,24,2006.0,,,2006,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 32,25,2011.0,,,2011,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 31,25,2011.0,,,2011,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 33,25,2011.0,,,2011,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 13892,26,2018.0,,,2018,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,Not available,Not available 13891,26,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 37,27,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 36,27,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 38,28,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 40,29,,,,Not available,Attribution by third-party,"Attribution given, type unclear",Not available,Not available,Not available,Not available 39,29,,,,Not available,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8667,30,2008.0,,,2008,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 42,31,2008.0,,,2008,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 44,32,2006.0,,,2006,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 43,32,2006.0,,,2006,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 45,33,2006.0,,,2006,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 13895,34,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13896,34,2013.0,,,2013,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,Not available,Not available 48,35,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3284,36,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3283,36,2013.0,,,2013,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 51,37,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 52,38,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 53,39,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 54,40,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8679,41,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 56,42,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 57,43,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 58,44,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8683,45,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8682,45,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 17377,46,2011.0,,,2011,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17378,46,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 64,48,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 65,48,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 66,49,2008.0,,,2008,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 67,50,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 68,51,2017.0,,,2017,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 69,52,2007.0,,,2007,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 70,53,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 71,54,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 73,55,2014.0,,,2014,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 72,55,2014.0,,,2014,Receiver attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 74,56,2007.0,,,2007,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 76,56,2007.0,,,2007,Contested attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 75,56,2007.0,,,2007,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 77,57,2007.0,,,2007,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 78,58,2007.0,,,2007,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 79,59,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 80,60,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 81,61,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 82,62,2009.0,,,2009,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 83,63,2011.0,,,2011,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 12775,64,2007.0,,,2007,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,China,Not available,Not available 85,65,2007.0,,,2007,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 86,66,2013.0,,,2013,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 8685,67,2015.0,,,2015,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8684,67,2015.0,,,2015,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8542,68,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8543,68,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 92,69,2018.0,,,2018,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 93,69,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 94,70,2013.0,,,2013,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 95,70,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 96,71,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 97,71,2013.0,,,2013,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 99,72,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 98,72,2013.0,,,2013,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 100,73,2014.0,,,2014,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 104,75,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 105,76,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 106,77,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 107,78,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 108,79,2011.0,,,2011,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 109,80,2008.0,,,2008,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 110,81,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 3271,82,2008.0,,,2008,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 112,83,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 113,84,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 114,85,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 115,86,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6711,87,2008.0,,,2008,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 6710,87,2008.0,,,2008,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6709,87,2008.0,,,2008,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1756,88,,,,Not available,Receiver attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 120,89,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8668,90,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 122,91,2008.0,,,2008,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 123,91,2008.0,,,2008,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 124,92,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 125,93,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 126,94,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 127,95,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 128,96,,,,Not available,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 129,97,,,,Not available,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 130,98,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 131,99,2018.0,,,2018,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 132,100,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 133,100,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 135,101,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 134,101,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 136,102,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 15004,103,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 138,104,,,,Not available,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 139,105,2011.0,,,2011,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3249,106,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6176,107,2011.0,,,2011,Attribution by third-party,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Canada,Communications Security Establishment Canada (CSEC),Not available 6177,107,2015.0,3.0,6.0,2015-3-6,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Russia,Kaspersky,Not available 6178,107,2015.0,,,2015,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 145,108,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 144,108,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 10767,109,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 10766,109,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 149,110,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 148,110,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 150,111,2017.0,,,2017,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 151,111,2017.0,,,2017,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 152,112,2009.0,,,2009,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 153,113,,,,Not available,Receiver attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 154,114,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 155,115,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 156,116,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 157,117,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 8799,118,2009.0,4.0,8.0,2009-4-8,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Not available,Not available 8545,119,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8544,119,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 14702,120,2009.0,7.0,,2009-7,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,"Korea, Republic of",National Intelligence Service (South Korea),Not available 14701,120,2009.0,7.0,,2009-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",Korea Communications Commission ,Not available 163,121,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 164,122,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 13898,123,2020.0,,,2020,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,Not available,Not available 10765,124,2009.0,,,2009,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 14781,125,2010.0,,,2010,Receiver attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google,Not available 14782,125,2010.0,,,2010,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 14783,125,2010.0,,,2010,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 170,126,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 173,127,2012.0,,,2012,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 172,127,2012.0,,,2012,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 171,127,2012.0,,,2012,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 174,128,2016.0,,,2016,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 175,129,2011.0,,,2011,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 176,130,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 177,131,2011.0,,,2011,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 178,132,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13901,133,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13902,133,2018.0,,,2018,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,United States,Not available,Not available 181,134,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 182,134,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 183,135,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 184,136,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 186,137,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 185,137,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 187,138,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 188,139,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 189,140,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 190,141,2010.0,,,2010,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 191,141,2010.0,,,2010,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 192,141,2010.0,,,2010,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 14717,142,2010.0,4.0,,2010-4,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Abc,Not available 14718,142,2018.0,,,2018,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 195,143,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 196,144,2015.0,,,2015,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 8672,145,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8671,145,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 199,146,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 200,147,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 201,148,2011.0,,,2011,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 202,149,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 203,150,2011.0,,,2011,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 204,150,2011.0,,,2011,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 205,151,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 206,152,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 207,153,2010.0,,,2010,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 208,154,2014.0,,,2014,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 209,154,2014.0,,,2014,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 210,155,2010.0,,,2010,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 16502,156,2011.0,,,2011,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 212,157,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 213,158,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 214,159,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 215,160,2011.0,,,2011,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 216,161,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 217,162,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 2339,163,2022.0,3.0,24.0,2022-3-24,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 2340,163,2014.0,7.0,7.0,2014-7-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 219,164,2011.0,,,2011,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 220,165,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 222,166,2018.0,,,2018,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 221,166,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11680,167,2017.0,9.0,13.0,2017-9-13,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 11679,167,2017.0,5.0,9.0,2017-5-9,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Intrusion Truth,Not available 225,168,2013.0,,,2013,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 226,169,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 227,170,2014.0,,,2014,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 11685,171,2012.0,,,2012,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11686,171,2012.0,,,2012,Attribution by receiver government / state entity,Statement in media report and indictment / sanctions,Not available,Not available,Not available,Not available 230,172,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 231,172,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8673,173,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 233,174,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 235,175,2011.0,,,2011,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 234,175,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 236,176,,,,Not available,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 237,177,,,,Not available,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 238,178,2016.0,,,2016,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 239,178,2016.0,,,2016,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 240,178,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 242,179,2016.0,,,2016,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 241,179,2016.0,,,2016,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 8674,180,2011.0,,,2011,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 244,181,2011.0,,,2011,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 245,181,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 246,182,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 247,183,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 248,184,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 8678,185,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 250,186,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 251,187,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 252,188,2011.0,,,2011,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 253,189,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 254,190,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 255,191,,,,Not available,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 256,192,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 257,193,2011.0,,,2011,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 258,194,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 259,195,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 260,196,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 261,197,2011.0,,,2011,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 262,197,2011.0,,,2011,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 263,198,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 264,199,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 265,200,2011.0,,,2011,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 266,201,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 267,202,,,,Not available,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 14508,203,2011.0,6.0,2.0,2011-6-2,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Google,Not available 269,204,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 270,205,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 271,206,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 272,207,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 273,208,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 274,209,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 275,210,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 6708,211,2016.0,,,2016,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 277,212,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 278,213,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 279,214,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 280,215,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 281,216,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 282,217,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 283,218,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 284,219,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 285,220,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 286,221,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 287,222,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 288,223,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 289,224,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 290,225,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 292,226,2011.0,,,2011,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 291,226,2011.0,,,2011,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 293,227,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 294,228,,,,Not available,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 295,229,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 296,230,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 297,231,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 298,232,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 299,233,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 300,234,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 301,235,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 302,236,2011.0,,,2011,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 303,237,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 304,238,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 305,239,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 306,240,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 307,241,,,,Not available,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 308,242,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 309,243,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 310,244,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 311,245,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 312,246,,,,Not available,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 313,247,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 314,248,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 315,249,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 316,250,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 318,251,2011.0,,,2011,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 317,251,2011.0,,,2011,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 319,252,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 320,253,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 321,254,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 322,255,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 323,256,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 324,257,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 325,258,2012.0,,,2012,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 327,259,2013.0,,,2013,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 326,259,2013.0,,,2013,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 8549,260,2012.0,,,2012,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 8550,260,2012.0,,,2012,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 330,261,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 331,262,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 332,263,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 333,264,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 334,265,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 335,266,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 336,267,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 337,268,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 338,269,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 339,270,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 340,271,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 10761,272,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 342,273,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 343,274,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 344,275,2014.0,,,2014,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 345,276,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 346,277,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 347,278,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 348,279,2011.0,,,2011,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 349,280,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 350,281,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 351,282,2011.0,,,2011,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 352,283,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 353,284,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 354,285,2011.0,,,2011,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 355,286,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 356,287,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 358,288,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 357,288,,,,Not available,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 359,289,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 360,290,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 361,291,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 362,292,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 363,293,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 364,294,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 365,295,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 366,296,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 367,297,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 368,298,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13888,299,2020.0,,,2020,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,Not available,Not available 13887,299,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 371,300,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17168,301,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 374,302,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 373,303,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 375,304,2016.0,,,2016,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 377,305,2018.0,,,2018,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 376,305,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 5929,306,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 5930,306,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 380,307,2012.0,,,2012,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 381,308,2019.0,,,2019,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 382,309,2019.0,,,2019,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 383,310,2014.0,,,2014,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 384,310,2014.0,,,2014,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 385,311,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 386,311,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 387,312,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 388,312,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8557,313,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8556,313,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 391,314,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 392,315,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 393,316,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 14719,317,2014.0,5.0,20.0,2014-5-20,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,US Department of Justice (DoJ),Not available 395,318,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 396,319,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 397,320,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 398,321,,,,Not available,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 17169,322,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 400,323,2013.0,,,2013,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 401,324,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 402,325,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 403,326,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 404,327,2012.0,,,2012,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 405,328,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 406,329,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 407,330,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 408,331,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 17167,332,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6706,333,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6705,334,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 412,335,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 413,336,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 414,337,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 415,338,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 416,339,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 417,340,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 418,341,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 419,342,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 420,343,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 421,344,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 422,345,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 423,346,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 424,347,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 425,348,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 426,349,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 427,350,2012.0,,,2012,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 428,351,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 429,352,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 430,353,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 431,354,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 432,355,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 433,356,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 434,357,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 435,358,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 3192,359,2012.0,,,2012,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 3193,359,2012.0,,,2012,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 438,360,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 439,361,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 440,362,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 441,363,,,,Not available,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 442,363,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 443,364,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 444,365,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 445,366,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 446,367,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 447,368,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 448,369,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 449,370,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 450,371,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 451,372,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 452,373,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 453,374,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 454,375,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 455,376,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 456,377,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 457,378,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 458,379,2012.0,,,2012,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 459,379,2012.0,,,2012,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 460,380,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 461,380,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 462,381,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 463,382,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 464,383,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 465,384,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 466,385,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 467,386,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 468,387,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 469,388,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 470,389,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 10760,390,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 472,391,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 473,392,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 474,393,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 475,394,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 476,395,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 477,396,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 478,397,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 479,398,2012.0,,,2012,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 480,399,2013.0,,,2013,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 481,400,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 482,401,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 483,402,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 484,403,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 485,404,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 486,405,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 487,406,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 488,406,2013.0,,,2013,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 489,407,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 490,408,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 491,409,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 492,410,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 493,411,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 494,412,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 495,413,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 496,414,2018.0,,,2018,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 497,414,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 498,415,2016.0,,,2016,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 499,415,2016.0,,,2016,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 500,416,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 501,417,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 502,418,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 503,419,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 504,420,2015.0,,,2015,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 505,421,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 506,422,2014.0,,,2014,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 507,422,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 508,423,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 509,424,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 510,425,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 511,426,2016.0,,,2016,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 512,426,2016.0,,,2016,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 513,427,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 514,428,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 14721,429,2014.0,1.0,,2014-1,Attribution by receiver government / state entity,Domestic legal action,Not available,Romania,Romanian Directorate for Investigating Organized Crime and Terrorism,Not available 14720,429,2013.0,12.0,,2013-12,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Romania,Not available,Not available 13889,430,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13890,430,2018.0,,,2018,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,Not available,Not available 521,431,2015.0,,,2015,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 520,431,2015.0,,,2015,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 519,431,2015.0,,,2015,Contested attribution,Not available,Not available,Not available,Not available,Not available 522,432,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 523,432,2014.0,,,2014,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 524,433,2013.0,,,2013,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 525,434,2013.0,,,2013,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 526,435,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 527,436,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 528,437,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 529,438,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 530,439,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 531,440,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 532,441,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6617,442,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 534,443,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 535,444,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 536,445,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 537,446,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 538,447,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 539,448,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 540,449,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 541,450,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 542,451,2013.0,,,2013,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 543,452,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 544,453,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16705,454,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 16706,454,2013.0,,,2013,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 547,455,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 548,455,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 549,456,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 550,457,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 8552,458,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8551,458,,,,Not available,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 8553,458,,,,Not available,Contested attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 554,459,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 555,460,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 556,461,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 557,462,2013.0,,,2013,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 558,462,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 559,463,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 560,464,,,,Not available,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 561,465,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 562,466,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 563,467,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 564,468,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 565,469,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 566,470,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 567,471,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 568,472,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 569,473,2013.0,,,2013,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 570,474,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 572,475,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 571,475,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 573,476,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 574,477,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 575,478,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16707,479,2013.0,,,2013,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 16708,479,2013.0,8.0,,2013-8,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",National Intelligence Service (South Korea),Not available 16709,479,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",Korea Internet & Security Agency,Not available 579,480,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 580,480,2015.0,,,2015,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 581,481,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 582,482,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 583,482,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 584,483,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 585,484,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 586,485,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 587,486,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 588,487,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 589,488,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 590,489,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 592,490,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 591,490,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 593,491,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 594,492,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 595,493,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 596,494,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 597,495,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 598,495,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 599,496,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 600,497,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 601,498,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 602,499,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 603,500,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 604,501,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6610,502,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 606,503,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 607,504,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 608,505,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 609,506,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 610,507,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 611,508,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 4802,509,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 613,510,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 614,511,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 615,512,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 616,513,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 617,514,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 618,515,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 619,516,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6608,517,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 621,518,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 622,519,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 623,520,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 624,521,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 625,522,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 626,523,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 627,524,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 628,525,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 629,526,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 630,527,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 631,528,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 632,529,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 634,530,2013.0,,,2013,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 633,530,2013.0,,,2013,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 635,531,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 636,532,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6605,533,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 638,534,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 639,535,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 640,536,2013.0,,,2013,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 641,537,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 642,538,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 643,539,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 644,540,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 645,541,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 646,542,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 647,543,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 648,544,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 649,545,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 650,546,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 651,547,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 652,548,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 653,549,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 654,550,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 655,551,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 656,552,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 657,553,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 658,554,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 659,555,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 660,556,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 661,557,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 662,558,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 663,559,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 664,560,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 665,561,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 666,562,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 4296,563,2020.0,6.0,,2020-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Lookout,Not available 17154,564,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 669,565,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 670,566,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 671,567,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 10759,568,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 673,569,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 674,570,2016.0,,,2016,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 676,571,2014.0,,,2014,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 675,571,2014.0,,,2014,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 677,572,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 678,573,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8558,574,2017.0,,,2017,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8559,574,2017.0,,,2017,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 681,575,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6606,576,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 683,577,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16210,578,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BAE Systems,BAE Systems 16211,578,2018.0,12.0,20.0,2018-12-20,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,US Department of Justice (DoJ),Not available 686,579,2018.0,,,2018,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 687,579,2018.0,,,2018,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 688,580,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 689,581,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 690,582,2018.0,,,2018,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 691,583,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 692,584,2016.0,,,2016,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 693,584,2016.0,,,2016,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 694,585,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 695,586,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 696,587,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11678,588,2017.0,5.0,9.0,2017-5-9,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Intrusion Truth,Not available 11677,588,2017.0,9.0,13.0,2017-9-13,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,Ministry of Foreign Affairs,Not available 11677,588,2017.0,9.0,13.0,2017-9-13,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 698,589,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 699,589,2014.0,,,2014,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6593,590,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 701,591,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 702,592,2014.0,,,2014,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 703,592,2014.0,,,2014,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 704,593,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 705,594,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 706,595,2020.0,,,2020,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 707,596,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 708,597,2014.0,,,2014,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 709,598,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 710,599,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 711,600,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 11665,601,2015.0,,,2015,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 11664,601,2015.0,,,2015,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 11663,601,2015.0,,,2015,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 715,602,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 716,603,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 717,604,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 718,604,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 719,605,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 720,606,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 721,607,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 723,608,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 722,608,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 724,609,2015.0,,,2015,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 725,610,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 2717,611,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 727,612,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 728,613,2014.0,,,2014,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 729,613,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 730,614,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 731,615,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 732,616,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6592,617,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 734,618,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 735,619,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 736,620,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 737,621,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 738,622,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 739,623,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 740,624,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 741,625,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 742,626,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 743,627,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 744,628,2014.0,,,2014,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 745,629,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 746,630,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 747,631,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 748,632,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 749,632,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 13622,633,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1787,634,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 753,635,2014.0,,,2014,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 754,636,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 756,637,,,,Not available,Receiver attributes attacker,"Attribution given, type unclear",Not available,Not available,Not available,Not available 755,637,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 758,637,,,,Not available,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 757,637,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 759,638,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 760,639,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 761,640,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 762,641,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 763,642,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 764,643,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 16704,644,2014.0,,,2014,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 16701,644,2014.0,,,2014,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 16702,644,2014.0,,,2014,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16703,644,2014.0,,,2014,Contested attribution,Not available,Not available,Not available,Not available,Not available 769,645,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 770,646,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 771,647,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 773,648,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 772,648,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 13621,649,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 775,650,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 776,651,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 777,652,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 778,653,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 779,654,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 780,655,2014.0,,,2014,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 781,656,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 782,657,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 783,658,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 784,659,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 785,660,,,,Not available,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 786,661,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 787,662,2018.0,,,2018,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 14750,663,2019.0,,,2019,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Germany,Bundesamt für Verfassungsschutz,Not available 14749,663,2019.0,4.0,,2019-4,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Germany,DCSO,DCSO 790,664,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 791,665,2020.0,,,2020,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 14346,666,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14347,666,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 793,667,2018.0,,,2018,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 794,667,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 795,668,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 796,669,2018.0,,,2018,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 17163,670,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 798,671,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 799,672,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8539,673,2016.0,12.0,22.0,2016-12-22,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Lithuania,Rimtautas Cerniauskas (Head of National Cyber Security Centre of Lithuania 2015-2017),Not available 801,674,2015.0,,,2015,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 802,674,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 5208,675,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 804,676,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 805,677,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17166,678,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 807,679,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 808,680,2016.0,,,2016,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 809,681,2015.0,,,2015,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 811,681,2015.0,,,2015,Contested attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 810,681,2015.0,,,2015,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 812,682,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 8560,683,2017.0,,,2017,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8561,683,2017.0,,,2017,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 815,684,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 10229,685,2016.0,5.0,17.0,2016-5-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,ESET 10230,685,2023.0,5.0,19.0,2023-5-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 817,686,2017.0,,,2017,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 818,687,2017.0,,,2017,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 819,688,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 821,689,2018.0,,,2018,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 820,689,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 822,690,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 823,690,,,,Not available,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 824,691,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 825,692,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 826,693,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 827,694,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 828,695,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 829,696,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 830,697,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 831,698,,,,Not available,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 832,699,2017.0,,,2017,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 833,700,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 834,701,2015.0,,,2015,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 835,702,,,,Not available,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 3248,703,2017.0,,,2017,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 3247,703,2017.0,,,2017,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 838,704,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 839,705,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 840,706,2015.0,,,2015,Contested attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 842,706,2015.0,,,2015,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 841,706,2015.0,,,2015,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 843,707,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 844,708,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 845,709,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 846,710,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 847,711,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16213,712,2016.0,5.0,,2016-5,Attribution by receiver government / state entity,Statement in media report and indictment / sanctions,Not available,Germany,Bundesamt für Verfassungsschutz,Not available 16212,712,2015.0,6.0,,2015-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Claudio Guarnieri,Not available 850,713,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 851,714,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 852,715,2015.0,,,2015,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 853,716,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 854,717,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 855,718,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 17165,719,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 857,720,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 4799,721,2016.0,1.0,1.0,2016-1-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 4800,721,2016.0,1.0,1.0,2016-1-1,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 4801,721,2016.0,1.0,1.0,2016-1-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 13899,722,2020.0,,,2020,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,Not available,Not available 862,723,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 863,724,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 864,725,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 865,726,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 866,727,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 867,728,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 868,729,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 869,730,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 870,731,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 871,732,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 872,733,2015.0,,,2015,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 873,734,2015.0,,,2015,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 874,734,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 875,735,2015.0,,,2015,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 876,736,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 877,737,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 879,738,2017.0,,,2017,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 878,738,2017.0,,,2017,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 880,739,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6589,740,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13619,741,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 883,742,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 884,743,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 885,744,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 886,745,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 887,746,2016.0,,,2016,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 16179,747,2015.0,6.0,,2015-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,FireEye,FireEye 16180,747,2015.0,6.0,11.0,2015-6-11,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,France,Paquet de Paris,Not available 890,748,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 891,749,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 892,750,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 893,751,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16711,752,2016.0,,,2016,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 16710,752,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 896,753,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 897,754,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 898,755,2015.0,,,2015,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 899,755,2015.0,,,2015,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 900,756,2015.0,,,2015,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 901,757,,,,Not available,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 902,758,,,,Not available,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 903,759,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13620,760,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 13623,761,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 906,762,2015.0,,,2015,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 907,763,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 908,764,2016.0,,,2016,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 909,765,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 910,766,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 911,767,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 912,768,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6329,769,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6328,770,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 915,771,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 916,772,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6326,773,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 918,774,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 919,775,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 3246,776,2017.0,,,2017,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 3245,776,2017.0,,,2017,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 11683,777,2017.0,5.0,9.0,2017-5-9,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Intrusion Truth,Not available 11684,777,2017.0,9.0,13.0,2017-9-13,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 3871,778,,,,Not available,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 925,779,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6588,780,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 2341,781,2017.0,10.0,20.0,2017-10-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 2343,781,2018.0,3.0,15.0,2018-3-15,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 2343,781,2018.0,3.0,15.0,2018-3-15,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,US Department of Homeland Security (DHS),Not available 2342,781,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Dragos,Not available 929,782,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 930,783,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 931,784,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 932,785,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 13626,786,2015.0,,,2015,Attribution by third-party,Domestic legal action,Not available,Not available,Not available,Not available 13625,786,2015.0,,,2015,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 13624,786,2015.0,,,2015,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 936,787,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 937,788,2020.0,,,2020,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 938,789,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 939,790,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 940,791,2016.0,,,2016,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 941,791,2016.0,,,2016,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 942,792,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 943,793,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 944,794,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 945,795,2019.0,,,2019,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 946,796,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 947,797,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 948,798,2017.0,,,2017,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 949,799,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 950,800,2017.0,,,2017,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 951,801,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 952,802,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17161,803,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 954,804,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17186,805,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 8648,806,2019.0,,,2019,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 957,807,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11666,808,2019.0,5.0,7.0,2019-5-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 959,809,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 960,810,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 961,811,2018.0,,,2018,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 962,812,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 964,813,2019.0,,,2019,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 963,813,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 965,814,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 966,815,2016.0,,,2016,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 967,816,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 16897,817,2018.0,12.0,21.0,2018-12-21,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 16897,817,2018.0,12.0,21.0,2018-12-21,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,US Department of the Treasury,Not available 16897,817,2018.0,12.0,21.0,2018-12-21,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,US Department of Homeland Security (DHS),Not available 16897,817,2018.0,12.0,21.0,2018-12-21,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 969,818,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17156,819,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 972,820,2016.0,,,2016,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 971,820,2016.0,,,2016,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 973,821,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 974,822,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 975,823,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 976,824,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 977,825,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 978,826,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 979,827,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 980,828,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 981,829,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 10758,830,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 2560,831,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 984,832,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 985,833,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 986,834,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 989,835,,,,Not available,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 987,835,,,,Not available,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 988,835,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 990,836,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 991,837,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 992,837,2016.0,,,2016,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 993,837,2016.0,,,2016,Contested attribution,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 994,838,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 995,839,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 996,840,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 997,841,2016.0,,,2016,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 14988,842,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 14989,842,2017.0,,,2017,Attribution by third-party,Domestic legal action,Not available,Not available,Not available,Not available 1000,843,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6587,844,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1002,845,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1003,846,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1004,847,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1005,848,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1006,849,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1007,850,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1008,851,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1009,852,2016.0,,,2016,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 1010,853,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1011,854,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1012,855,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1013,856,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1014,857,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1015,857,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1016,858,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1017,859,2016.0,,,2016,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1018,860,2017.0,,,2017,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1019,861,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1716,862,2016.0,1.0,1.0,2016-1-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1717,862,2016.0,1.0,1.0,2016-1-1,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 1022,863,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6586,864,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1025,865,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1024,865,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1026,866,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1027,867,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1028,868,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1029,869,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1030,870,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1031,871,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1032,872,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 6340,873,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1034,874,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1035,875,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1036,876,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1037,877,,,,Not available,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1038,878,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1039,879,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 10226,880,2017.0,2.0,15.0,2017-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,CyberX,Not available 10227,880,2023.0,5.0,19.0,2023-5-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 1041,881,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1042,882,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1043,883,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1044,884,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1045,885,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1046,886,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1047,886,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1048,887,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1049,888,2017.0,,,2017,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1050,889,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1051,890,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1052,891,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1053,892,2016.0,,,2016,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1054,893,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1055,894,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1056,895,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1057,896,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1058,897,2016.0,,,2016,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1059,897,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1060,897,2016.0,,,2016,Attribution by third-party,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 11662,898,2016.0,9.0,2.0,2016-9-2,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,FireEye,Not available 1062,899,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1063,900,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1064,901,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6585,902,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1066,903,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1067,904,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1068,905,,,,Not available,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 6269,906,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1070,907,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1071,908,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1072,909,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1073,910,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1074,911,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1075,912,2016.0,,,2016,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1076,913,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1077,914,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1078,915,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1079,916,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1080,917,,,,Not available,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1081,918,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1082,919,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1083,920,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1084,921,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 4798,922,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1086,923,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1087,924,2017.0,,,2017,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1088,925,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1089,926,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1090,927,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1091,928,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1092,929,,,,Not available,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1093,930,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1094,931,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1095,932,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 14751,933,,,,Not available,Attribution by receiver government / state entity,Domestic legal action,Not available,Germany,Bundesamt für Sicherheits und Informationstechnik,Not available 1097,934,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1098,935,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1099,936,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1100,937,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1101,937,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 5732,938,2017.0,6.0,12.0,2017-6-12,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Bellingcat,Not available 13614,939,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1105,940,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6583,941,2017.0,,,2017,Attribution by third-party,Domestic legal action,Not available,Not available,Not available,Not available 6584,941,2017.0,,,2017,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1108,942,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1109,943,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1110,944,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1111,945,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1112,946,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1115,947,2017.0,,,2017,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1114,947,2017.0,,,2017,Attribution by third-party,Domestic legal action,Not available,Not available,Not available,Not available 1113,947,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1116,948,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1117,949,2020.0,,,2020,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 1118,950,2019.0,,,2019,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1119,951,2016.0,,,2016,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 3093,952,2016.0,,,2016,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1121,953,2016.0,,,2016,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1122,954,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1123,955,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1124,956,2021.0,,,2021,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1125,956,2021.0,,,2021,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1126,957,2018.0,,,2018,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1127,958,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1128,959,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1129,959,2018.0,,,2018,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1130,960,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1131,961,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1132,962,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1133,963,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 18927,964,2017.0,,,2017,Attribution by third-party,Domestic legal action,Not available,Not available,Not available,Not available 18926,964,2017.0,,,2017,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 6582,966,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13903,967,2020.0,,,2020,Attribution by receiver government / state entity,Domestic legal action,Not available,United States,Not available,Not available 1139,968,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 2559,969,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1141,970,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1142,971,2017.0,,,2017,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 6693,972,2020.0,10.0,23.0,2020-10-23,Attribution by third-party,Domestic legal action,Sanctions,United States,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 6694,972,2022.0,3.0,24.0,2022-3-24,Attribution by third-party,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 6691,972,2018.0,10.0,23.0,2018-10-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 6690,972,2017.0,,,2017,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 6692,972,2017.0,12.0,15.0,2017-12-15,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Israel,CyberX,Not available 1147,973,2017.0,,,2017,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 3867,974,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1149,975,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1150,976,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1151,977,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1152,978,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1153,979,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11062,980,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11063,980,2018.0,,,2018,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1156,981,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1157,982,2018.0,,,2018,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1159,983,2019.0,,,2019,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1158,983,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1160,984,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1161,985,2017.0,,,2017,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1162,986,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1163,987,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1164,988,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1165,989,2017.0,,,2017,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1166,990,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1167,991,2017.0,,,2017,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1168,992,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1169,993,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 12439,994,2022.0,8.0,19.0,2022-8-19,Contested attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Montenegro,Cuba Ransomware,Not available 12439,994,2022.0,8.0,19.0,2022-8-19,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Montenegro,Cuba Ransomware,Not available 12438,994,2022.0,8.0,31.0,2022-8-31,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Montenegro,"Marash Dukaj (Public Administration Minister, Montenegro)",Not available 12440,994,2022.0,8.0,26.0,2022-8-26,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Montenegro,Agencija za Nacionalnu Bezbjednost (ANB),Not available 1171,995,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1172,996,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1173,997,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1174,998,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1175,999,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3851,1000,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1178,1001,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1177,1001,2017.0,,,2017,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 3839,1002,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1180,1003,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1181,1004,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 3837,1005,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1184,1006,2017.0,,,2017,Attribution by third-party,Domestic legal action,Not available,Not available,Not available,Not available 1183,1006,2017.0,,,2017,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1185,1007,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1186,1008,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1187,1009,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 2558,1010,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1189,1011,2018.0,,,2018,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1191,1013,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1192,1014,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1193,1015,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Symantec,Symantec 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Kaspersky,Symantec 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Kaspersky 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Symantec,Kaspersky 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Symantec 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 16206,1016,2017.0,12.0,18.0,2017-12-18,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,United States,Thomas P. Bossert - Homeland Security Advisor to President Donald Trump,Not available 16207,1016,2017.0,12.0,20.0,2017-12-20,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,Australia,Julie Bishop - Minister for Foreign Affairs,Not available 16208,1016,2017.0,12.0,19.0,2017-12-19,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Lord Ahmad of Wimbledon - British Foreign Office Minister ,Not available 16209,1016,2017.0,6.0,16.0,2017-6-16,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 16205,1016,2017.0,5.0,15.0,2017-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Kaspersky,Kaspersky 1196,1017,2018.0,,,2018,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1197,1018,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6580,1019,2017.0,,,2017,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 6581,1019,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1200,1020,2020.0,,,2020,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 1201,1021,2017.0,,,2017,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1202,1022,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1203,1023,2017.0,,,2017,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1204,1024,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6416,1025,2017.0,6.0,7.0,2017-6-7,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 6415,1025,2017.0,6.0,7.0,2017-6-7,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 6417,1025,2017.0,6.0,,2017-6,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Qatar,Not available,Not available 6418,1025,2017.0,6.0,,2017-6,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,US intelligence agencies,Not available 1207,1026,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1208,1027,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1209,1028,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1210,1029,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1211,1030,2017.0,,,2017,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1212,1030,2017.0,,,2017,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1213,1031,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16198,1032,2017.0,7.0,3.0,2017-7-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 16196,1032,2018.0,2.0,15.0,2018-2-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,The White House,Not available 16199,1032,2017.0,6.0,28.0,2017-6-28,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Roman Boyarchuk (Head of the Center for Cyber Protection within the State Special Communications Service of Ukraine (SSSCIP)),Not available 16203,1032,2018.0,2.0,16.0,2018-2-16,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Australia,Angus Taylor (Minister for Law Enforcement and Cyber Security; AUS),Not available 16201,1032,2018.0,1.0,12.0,2018-1-12,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Central Intelligence Agency ,Not available 16202,1032,2018.0,2.0,15.0,2018-2-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,"Lord (Tariq) Ahmad of Wimbledon (Minister of State for the Middle East, North Africa, South Asia and United Nations at the Foreign, Commonwealth & Development Office (FCDO); GBR)",Not available 16204,1032,2018.0,2.0,16.0,2018-2-16,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Canada,Government of Canada,Not available 16195,1032,2020.0,7.0,30.0,2020-7-30,Attribution by EU institution/agency,Domestic legal action,Sanctions,EU (region),Council of the European Union (European Council),Not available 16200,1032,2018.0,2.0,16.0,2018-2-16,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,New Zealand, Andrew Hampton (Director-General of the Government Communications Security Bureau (GCSB); NZL),Not available 16197,1032,2020.0,10.0,19.0,2020-10-19,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 1217,1033,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1218,1034,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 10757,1035,2018.0,,,2018,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1220,1036,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1221,1037,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 3241,1038,2018.0,,,2018,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 3242,1038,2018.0,,,2018,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1224,1039,2020.0,,,2020,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 13613,1040,2018.0,1.0,1.0,2018-1-1,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1226,1041,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1227,1042,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1228,1043,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1229,1044,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1230,1045,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1231,1046,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1232,1047,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 16712,1048,2018.0,,,2018,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 16713,1048,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1235,1049,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1236,1050,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1237,1051,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 13610,1052,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1239,1053,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1240,1053,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1241,1054,2019.0,,,2019,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1243,1055,2017.0,,,2017,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1242,1055,2017.0,,,2017,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1244,1056,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1246,1057,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1247,1057,2018.0,,,2018,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1245,1057,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1248,1058,,,,Not available,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1249,1059,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 4685,1060,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1251,1061,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1252,1062,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1253,1063,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1254,1064,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 14785,1065,2018.0,9.0,29.0,2018-9-29,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,Not available,Not available 14784,1065,2017.0,10.0,25.0,2017-10-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,We live security,We live security 14785,1065,2018.0,9.0,29.0,2018-9-29,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,New Zealand,Not available,Not available 14786,1065,2017.0,10.0,3.0,2017-10-3,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Security Service of Ukraine (SBU),Not available 14785,1065,2018.0,9.0,29.0,2018-9-29,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Australia,Not available,Not available 1258,1066,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1259,1067,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1260,1068,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 5302,1069,2018.0,11.0,,2018-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cylance (today: Blackberry),Not available 5303,1069,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BlackBerry Research and Intelligence Team,Not available 1263,1070,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1264,1071,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1265,1072,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1266,1073,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1267,1074,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1268,1075,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13995,1076,2020.0,,,2020,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,United States,Not available,Not available 1271,1077,2019.0,,,2019,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1270,1077,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1272,1078,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1273,1079,,,,Not available,Receiver attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1274,1080,2017.0,,,2017,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1275,1080,2017.0,,,2017,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 14510,1081,2020.0,9.0,17.0,2020-9-17,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,United States,Federal Bureau of Investigation (FBI),Not available 14509,1081,2020.0,12.0,9.0,2020-12-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Switzerland,Reversing Lab,Reversing Lab 8488,1082,2018.0,6.0,8.0,2018-6-8,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Not available,Not available 1279,1083,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1280,1084,2018.0,,,2018,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1281,1084,2018.0,,,2018,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1282,1085,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1283,1086,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1284,1087,2019.0,,,2019,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1285,1088,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1286,1089,,,,Not available,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1287,1090,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1288,1091,2018.0,,,2018,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1289,1092,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1290,1093,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1291,1094,2018.0,,,2018,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 6575,1095,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6574,1095,2020.0,,,2020,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1294,1096,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1295,1097,,,,Not available,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1296,1098,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1298,1099,2019.0,,,2019,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1297,1099,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1299,1100,2020.0,,,2020,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1300,1101,2019.0,,,2019,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1301,1102,2020.0,,,2020,Attribution by receiver government / state entity,Domestic legal action,Not available,Not available,Not available,Not available 1302,1103,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1303,1104,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1304,1105,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1305,1106,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 9622,1107,2018.0,,,2018,Attribution by third-party,Statement in media report and indictment / sanctions,Not available,Not available,Not available,Not available 9621,1107,2018.0,,,2018,Contested attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 9620,1107,2018.0,,,2018,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 17160,1108,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17159,1108,,,,Not available,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1311,1109,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1312,1110,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 14753,1111,2020.0,8.0,,2020-8,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 14752,1111,2020.0,2.0,,2020-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,ClearSky,ClearSky 6564,1112,2018.0,1.0,1.0,2018-1-1,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 6565,1112,2018.0,1.0,1.0,2018-1-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1317,1113,,,,Not available,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1318,1114,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1319,1114,2020.0,,,2020,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1320,1115,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1321,1116,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 3826,1117,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 10009,1118,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1324,1119,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1325,1120,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1326,1121,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1327,1122,2020.0,,,2020,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1328,1123,,,,Not available,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1329,1124,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1330,1125,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1331,1126,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 3808,1127,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1333,1128,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1334,1129,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1335,1130,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1336,1131,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1337,1132,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1338,1133,2019.0,,,2019,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 6379,1134,2018.0,,,2018,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1340,1135,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1341,1136,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1343,1137,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1342,1137,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1344,1138,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1345,1139,,,,Not available,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1346,1140,,,,Not available,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1347,1141,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1348,1142,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1349,1143,2018.0,,,2018,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 6375,1144,2018.0,,,2018,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 6374,1144,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6371,1145,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1353,1146,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1354,1147,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1355,1148,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1356,1149,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1357,1149,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1358,1150,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1359,1151,2018.0,,,2018,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1361,1152,2018.0,,,2018,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1360,1152,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 4684,1153,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1363,1154,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1364,1155,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1365,1156,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1366,1157,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1367,1158,2018.0,,,2018,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1368,1159,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 13609,1160,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1371,1161,2018.0,,,2018,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1370,1161,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1372,1162,2019.0,,,2019,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 4797,1163,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1374,1164,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1375,1165,2019.0,,,2019,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1376,1165,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1377,1166,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1378,1167,2020.0,,,2020,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1379,1167,2020.0,,,2020,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1380,1167,2020.0,,,2020,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1381,1168,2018.0,,,2018,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1382,1169,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1383,1170,2018.0,,,2018,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1384,1171,2019.0,,,2019,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1385,1172,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1386,1173,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 13419,1174,2018.0,,,2018,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13418,1175,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 14754,1176,2020.0,10.0,24.0,2020-10-24,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 1390,1177,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1391,1178,2020.0,,,2020,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1392,1179,2020.0,,,2020,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 5213,1180,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Lookout,Not available 1394,1181,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1395,1182,2021.0,,,2021,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1396,1183,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1397,1184,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1399,1185,2019.0,,,2019,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1398,1185,2019.0,,,2019,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1400,1186,2020.0,,,2020,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1401,1187,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1402,1188,2018.0,,,2018,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6365,1189,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1404,1190,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 5314,1191,2020.0,10.0,7.0,2020-10-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BlackBerry Research and Intelligence Team,Not available 1406,1192,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1407,1193,2021.0,,,2021,Attribution by receiver government / state entity,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1410,1194,2019.0,,,2019,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1409,1194,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1408,1194,2019.0,,,2019,Contested attribution,Not available,Not available,Not available,Not available,Not available 1412,1195,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1411,1195,,,,Not available,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1413,1196,2019.0,,,2019,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1414,1197,2019.0,,,2019,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1415,1198,2019.0,,,2019,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1416,1199,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1417,1200,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1418,1201,,,,Not available,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1419,1202,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1420,1203,2019.0,,,2019,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 5820,1204,2019.0,,,2019,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 5819,1204,2019.0,,,2019,Receiver attributes attacker,Domestic legal action,Not available,Not available,Not available,Not available 3806,1205,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6364,1206,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1425,1207,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1426,1208,2020.0,,,2020,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1427,1209,2020.0,,,2020,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1428,1210,2019.0,,,2019,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1429,1211,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1430,1212,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1431,1213,2019.0,,,2019,Receiver attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1433,1214,2019.0,,,2019,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1432,1214,2019.0,,,2019,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1434,1215,2019.0,,,2019,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1435,1216,2019.0,,,2019,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1436,1217,2019.0,,,2019,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1437,1218,2019.0,,,2019,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 5431,1219,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1439,1220,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1440,1221,2019.0,,,2019,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1441,1222,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3236,1223,2019.0,,,2019,Attribution by third-party,Political statement/report and indictment / sanctions,Not available,Not available,Not available,Not available 3237,1223,2019.0,,,2019,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1444,1224,2019.0,,,2019,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1445,1225,2019.0,,,2019,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1447,1226,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1446,1226,2019.0,,,2019,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1449,1227,2019.0,,,2019,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1448,1227,2019.0,,,2019,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 7052,1228,2020.0,,,2020,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 14993,1229,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17360,1230,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1453,1231,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1454,1232,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1455,1233,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1456,1234,2020.0,,,2020,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1457,1235,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1458,1236,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1459,1237,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1460,1238,2020.0,,,2020,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1461,1239,2019.0,,,2019,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1462,1240,2020.0,,,2020,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1463,1241,2020.0,,,2020,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 14775,1242,2019.0,5.0,28.0,2019-5-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Palo Alto Networks 14776,1242,2019.0,12.0,15.0,2019-12-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Iran, Islamic Republic of",Not available,Not available 1466,1243,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1467,1244,2019.0,,,2019,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1468,1245,2020.0,,,2020,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1469,1245,2020.0,,,2020,Receiver attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1470,1246,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 1471,1247,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1472,1248,2020.0,,,2020,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1473,1249,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1474,1250,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1475,1251,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1476,1252,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17184,1253,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 14488,1254,2021.0,2.0,23.0,2021-2-23,IT-security community attributes attacker,Domestic legal action,Hearings,United States,Microsoft,Not available 14486,1254,2022.0,4.0,27.0,2022-4-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 14487,1254,2021.0,4.0,15.0,2021-4-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,UK government,Not available 14490,1254,2021.0,4.0,15.0,2021-4-15,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Canada,Government of Canada,Not available 14491,1254,2020.0,12.0,13.0,2020-12-13,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 14492,1254,2021.0,4.0,15.0,2021-4-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Joe Biden (President, USA)",Not available 14492,1254,2021.0,4.0,15.0,2021-4-15,Attribution by receiver government / state entity,Domestic legal action,Sanctions,United States,"Joe Biden (President, USA)",Not available 14488,1254,2021.0,2.0,23.0,2021-2-23,IT-security community attributes attacker,Domestic legal action,Hearings,United States,Mandiant,Not available 14489,1254,2021.0,1.0,5.0,2021-1-5,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Cyber Unified Coordination Group (UCG),Not available 1480,1255,2020.0,,,2020,IT-security community attributes attacker,Statement in media report and political statement/technical report,Not available,Not available,Not available,Not available 1481,1256,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1482,1257,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13900,1258,2020.0,,,2020,Attribution by receiver government / state entity,Political statement/report and indictment / sanctions,Not available,United States,Not available,Not available 8660,1259,2020.0,,,2020,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1485,1260,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1486,1261,2019.0,,,2019,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1487,1262,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 10658,1263,,,,Not available,Media-based attribution,"Attribution given, type unclear",Not available,Not available,Not available,Not available 6143,1264,2021.0,11.0,8.0,2021-11-8,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 6142,1264,2019.0,8.0,18.0,2019-8-18,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 6141,1264,2019.0,8.0,16.0,2019-8-16,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1490,1265,2020.0,,,2020,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1800,1266,2019.0,1.0,1.0,2019-1-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,FireEye,Not available 17248,1267,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1493,1268,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1494,1269,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1495,1270,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1496,1271,2021.0,,,2021,Contested attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1497,1272,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1498,1273,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 15679,1274,2021.0,6.0,22.0,2021-6-22,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Poland,Military Counterintelligence Service (Poland),Not available 15678,1274,2021.0,9.0,6.0,2021-9-6,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Germany,Federal Government of Germany,Not available 15679,1274,2021.0,6.0,22.0,2021-6-22,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Poland,Internal Security Agency (Poland),Not available 15680,1274,2021.0,6.0,18.0,2021-6-18,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Poland,"Jaroslav Kaczynski (Deputy Prime Minister, Poland)",Not available 15683,1274,2021.0,3.0,26.0,2021-3-26,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Germany,Not available,Not available 15677,1274,2021.0,9.0,24.0,2021-9-24,Attribution by EU institution/agency,"Political statement / report (e.g., on government / state agency websites)",Not available,EU (region),High Representative of the Union for Foreign Affairs and Security Policy (HR/VP),Not available 15681,1274,2021.0,11.0,16.0,2021-11-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 15682,1274,2021.0,3.0,17.0,2021-3-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,FireEye,Not available 1503,1275,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1504,1276,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1505,1277,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1506,1278,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1507,1279,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1508,1280,2019.0,,,2019,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1509,1281,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17152,1282,2021.0,,,2021,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1511,1283,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 14694,1284,2021.0,7.0,,2021-7,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,National Security Agency (NSA),Not available 13828,1285,2021.0,9.0,23.0,2021-9-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovenia,ESET,Not available 3224,1286,2020.0,,,2020,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1515,1287,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17242,1288,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1517,1289,2020.0,,,2020,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1518,1290,2020.0,,,2020,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1519,1291,2020.0,,,2020,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1520,1292,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1522,1293,2020.0,,,2020,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1521,1293,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1523,1294,2020.0,,,2020,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1525,1295,2020.0,,,2020,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1524,1295,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 14994,1296,2020.0,12.0,23.0,2020-12-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Securelist,Securelist 14992,1297,2020.0,,,2020,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1528,1298,2020.0,,,2020,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1529,1299,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1530,1300,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1531,1301,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1533,1302,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1532,1302,2021.0,,,2021,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1534,1303,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1535,1304,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1536,1305,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1537,1306,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 14695,1307,2020.0,7.0,15.0,2020-7-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Communications Security Establishment Canada (CSEC),Not available 14695,1307,2020.0,7.0,15.0,2020-7-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 14695,1307,2020.0,7.0,15.0,2020-7-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Canada,Communications Security Establishment Canada (CSEC),Not available 14695,1307,2020.0,7.0,15.0,2020-7-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Canada,United Kingdom’s National Cyber Security Centre (NCSC),Not available 1539,1308,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 4565,1309,2021.0,9.0,,2021-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Group-IB,Not available 1541,1310,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1542,1311,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1544,1312,2021.0,,,2021,Contested attribution,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1543,1312,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1545,1313,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1546,1314,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1547,1315,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1548,1316,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1549,1317,2021.0,,,2021,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 6686,1318,2022.0,,,2022,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6687,1318,2022.0,11.0,30.0,2022-11-30,Receiver attributes attacker,Domestic legal action,Lawsuit (by private actors),El Salvador,"Members of ""El Faro""",Not available 1551,1319,2020.0,,,2020,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1552,1320,2020.0,,,2020,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1554,1321,2020.0,,,2020,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1553,1321,2020.0,,,2020,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1555,1322,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1556,1323,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1558,1325,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 6261,1326,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1560,1327,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1561,1328,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1562,1329,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1564,1330,2021.0,,,2021,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1563,1330,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1565,1331,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 12201,1332,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1567,1333,2021.0,,,2021,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1568,1333,2021.0,,,2021,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1569,1334,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1571,1335,2021.0,,,2021,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1570,1335,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1572,1336,2021.0,,,2021,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1574,1337,2021.0,,,2021,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1573,1337,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1576,1338,2021.0,,,2021,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1575,1338,2021.0,,,2021,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1577,1339,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1578,1340,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1580,1341,2021.0,,,2021,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1579,1341,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1581,1342,2021.0,,,2021,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 2610,1343,2021.0,,,2021,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1583,1344,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1584,1345,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1585,1346,2021.0,,,2021,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3797,1347,2021.0,,,2021,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 1587,1348,2021.0,,,2021,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 1588,1349,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 16568,1350,2021.0,7.0,9.0,2021-7-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,"Gonjeshke Darande = Predatory Sparrow/Indra (Israeli Defence Forces, Unit 8200)",Not available 1590,1351,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1591,1352,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1592,1353,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1593,1354,2021.0,,,2021,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 1594,1355,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 4795,1356,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1596,1357,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1597,1358,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 2403,1359,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1599,1360,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1600,1361,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1601,1362,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 12196,1363,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1603,1364,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 10941,1365,2021.0,,,2021,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 10940,1365,2021.0,,,2021,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1606,1366,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1607,1367,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1608,1368,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1609,1369,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1610,1370,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1611,1371,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1612,1372,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1613,1373,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1614,1374,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1615,1375,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1616,1376,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1617,1377,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1618,1378,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1619,1379,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1620,1380,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1621,1381,2021.0,,,2021,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 1622,1382,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1623,1383,2021.0,,,2021,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 3272,1384,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 1625,1385,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1626,1386,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1627,1387,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1628,1388,2021.0,,,2021,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 6383,1389,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3877,1390,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1631,1391,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17185,1392,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 13312,1393,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 1633,1394,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1634,1395,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 6270,1396,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1636,1397,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11512,1398,2022.0,2.0,4.0,2022-2-4,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,David Wong (Vice President of Consulting at Mandiant),Not available 11513,1399,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1639,1400,2022.0,,,2022,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 11514,1401,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 11515,1402,2022.0,3.0,29.0,2022-3-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Cisco Talos 1643,1403,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1644,1404,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3176,1405,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3207,1406,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 1647,1407,2021.0,,,2021,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 3172,1408,2022.0,,,2022,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3171,1409,2021.0,,,2021,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 3170,1410,2021.0,,,2021,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 17280,1411,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1652,1412,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1653,1413,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 3168,1414,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 1656,1416,2021.0,,,2021,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 12422,1417,2021.0,5.0,10.0,2021-5-10,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Joe Biden (President, USA)",Not available 12420,1417,2021.0,5.0,10.0,2021-5-10,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 12421,1417,2021.0,5.0,10.0,2021-5-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybereason,Not available 11750,1418,2022.0,1.0,7.0,2022-1-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,MalwareBytes,Not available 3155,1420,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 5211,1421,2022.0,1.0,27.0,2022-1-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,"Gonjeshke Darande = Predatory Sparrow/Indra (Israeli Defence Forces, Unit 8200)",Not available 5212,1421,2022.0,1.0,27.0,2022-1-27,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of","Reza Alidadi (Deputy Head of Technical Affairs for IRIB, Iran)",Not available 3153,1422,2022.0,,,2022,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 3151,1425,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 11601,1426,2022.0,2.0,,2022-2,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Cyber Police Force of Ukraine,Not available 8108,1427,2022.0,5.0,29.0,2022-5-29,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Spid3r,Not available 2274,1428,2022.0,2.0,27.0,2022-2-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,@ContiLeaks,Not available 7944,1429,2022.0,,,2022,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 14375,1431,2022.0,3.0,8.0,2022-3-8,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 11612,1432,2022.0,6.0,23.0,2022-6-23,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Germany,Arne Schönbohm (Head of BSI; Germany),Not available 11611,1432,2022.0,3.0,11.0,2022-3-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 1673,1433,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 8119,1435,2022.0,3.0,21.0,2022-3-21,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 8120,1436,2022.0,3.0,24.0,2022-3-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 8121,1437,2022.0,3.0,24.0,2022-3-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 7943,1438,2022.0,,,2022,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 3502,1439,2022.0,3.0,11.0,2022-3-11,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,National Computer Network Emergency Response Technical Team/Coordination Center of China,Not available 3503,1439,2022.0,4.0,1.0,2022-4-1,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 8122,1440,2022.0,4.0,1.0,2022-4-1,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 8123,1441,2022.0,4.0,4.0,2022-4-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 8124,1443,2022.0,4.0,19.0,2022-4-19,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 3142,1444,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 8138,1445,2022.0,4.0,11.0,2022-4-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 14376,1446,2022.0,4.0,30.0,2022-4-30,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 1688,1447,,,,Not available,Media-based attribution,Not available,Not available,Not available,Not available,Not available 9740,1448,2022.0,1.0,16.0,2022-1-16,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Unknown,Not available 13947,1449,2022.0,1.0,15.0,2022-1-15,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,"Serhiy Demedyuk (deputy secretary of the national security and defence council, UKR)",Not available 13946,1449,2022.0,5.0,10.0,2022-5-10,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Antony J. Blinken (Secretary of State, USA)",Not available 13945,1449,2022.0,1.0,15.0,2022-1-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 13944,1449,2022.0,6.0,14.0,2022-6-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 3140,1450,2021.0,,,2021,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Not available,Not available,Not available 17438,1451,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17437,1452,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17436,1454,2022.0,2.0,,2022-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,LockBit,Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,National Security Agency (NSA),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Cyber National Mission Force (CNMF),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Federal Bureau of Investigation (FBI),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Cybersecurity and Infrastructure Security Agency (CISA),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,National Security Agency (NSA),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Cyber National Mission Force (CNMF),Not available 17435,1455,2022.0,2.0,24.0,2022-2-24,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 7225,1468,2022.0,8.0,15.0,2022-8-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 7226,1468,2022.0,9.0,15.0,2022-9-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Not available 7223,1491,2022.0,7.0,6.0,2022-7-6,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 7223,1491,2022.0,7.0,6.0,2022-7-6,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 7224,1491,2022.0,8.0,9.0,2022-8-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 7223,1491,2022.0,7.0,6.0,2022-7-6,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,National Security Agency (NSA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada, US Cyber Command (USCC / US CYCOM),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Cyber National Mission Force (CNMF),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Australian Cyber Security Centre (ACSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Federal Bureau of Investigation (FBI),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Canadian Centre for Cyber Security (CCCS),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Canadian Centre for Cyber Security (CCCS),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 12411,1493,2022.0,9.0,14.0,2022-9-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Secureworks,Not available 12412,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Australian Cyber Security Centre (ACSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Australian Cyber Security Centre (ACSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Cyber National Mission Force (CNMF),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia, US Cyber Command (USCC / US CYCOM),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Federal Bureau of Investigation (FBI),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,National Security Agency (NSA),Not available 12410,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,Domestic legal action,Sanctions,United States,US Department of the Treasury,Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Canadian Centre for Cyber Security (CCCS),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,United Kingdom’s National Cyber Security Centre (NCSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Canadian Centre for Cyber Security (CCCS),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Federal Bureau of Investigation (FBI),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,National Security Agency (NSA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,United Kingdom’s National Cyber Security Centre (NCSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cyber National Mission Force (CNMF),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States, US Cyber Command (USCC / US CYCOM),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Australian Cyber Security Centre (ACSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Cyber National Mission Force (CNMF),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Security Agency (NSA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom, US Cyber Command (USCC / US CYCOM),Not available 12409,1493,2022.0,9.0,14.0,2022-9-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 7217,1494,2022.0,9.0,8.0,2022-9-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Not available 7218,1494,2022.0,7.0,7.0,2022-7-7,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Japan Computer Emergency Response Team Coordination Center (JPCERT/CC),Not available 10756,1495,2022.0,9.0,14.0,2022-9-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 7215,1496,2022.0,9.0,14.0,2022-9-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 7214,1499,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12408,1500,2022.0,9.0,19.0,2022-9-19,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Central America (region),Guacamaya,Not available 11603,1501,2022.0,9.0,11.0,2022-9-11,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,National Security Council,Not available 11604,1501,2022.0,9.0,21.0,2022-9-21,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 11602,1501,2022.0,9.0,10.0,2022-9-10,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Albania,"Edi Rama (Prime Minister, ALB)",Not available 17170,1502,2022.0,9.0,8.0,2022-9-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 17172,1502,2022.0,8.0,4.0,2022-8-4,IT-security community attributes attacker,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,United States,Mandiant,Not available 17172,1502,2022.0,8.0,4.0,2022-8-4,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 17171,1502,2022.0,9.0,8.0,2022-9-8,Attribution by international organization,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,North Atlantic Treaty Organization (NATO),Not available 17172,1502,2022.0,8.0,4.0,2022-8-4,Attacker confirms,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 17173,1502,2022.0,9.0,21.0,2022-9-21,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 17173,1502,2022.0,9.0,21.0,2022-9-21,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 17174,1502,2022.0,9.0,7.0,2022-9-7,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Albania,"Edi Rama (Prime Minister, ALB)",Not available 17175,1502,2022.0,9.0,7.0,2022-9-7,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17175,1502,2022.0,9.0,7.0,2022-9-7,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,National Security Council,Not available 17175,1502,2022.0,9.0,7.0,2022-9-7,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17172,1502,2022.0,8.0,4.0,2022-8-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,United States,Mandiant,Not available 17175,1502,2022.0,9.0,7.0,2022-9-7,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,National Security Council,Not available 6237,1503,2022.0,9.0,20.0,2022-9-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 4528,1504,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7204,1505,2022.0,9.0,22.0,2022-9-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Not available 2260,1506,2016.0,1.0,24.0,2016-1-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Not available 7203,1507,2017.0,10.0,20.0,2017-10-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Lookout,Not available 8140,1508,2022.0,9.0,23.0,2022-9-23,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 7201,1509,2022.0,7.0,21.0,2022-7-21,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Everest,Not available 4533,1510,2022.0,9.0,24.0,2022-9-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Optusdata,Not available 11369,1511,2022.0,4.0,12.0,2022-4-12,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 7198,1512,2014.0,5.0,23.0,2014-5-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,CyberBerkut,Not available 11516,1513,2022.0,9.0,22.0,2022-9-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Not available 12399,1514,2022.0,5.0,10.0,2022-5-10,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,New Zealand,"Nanaia Cybelle Mahuta (Foreign Minister, NZL)",Not available 12400,1514,2022.0,5.0,10.0,2022-5-10,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Canada,Government of Canada,Not available 12402,1514,2022.0,5.0,10.0,2022-5-10,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,"Liz Truss (Secretary of State for Foreign, Commonwealth and Development Affairs, United Kingdom)",Not available 12405,1514,2022.0,5.0,10.0,2022-5-10,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Australia,"Marise Payne (Minister for Foreign Affairs; Minister for Women, AUS)",Not available 12403,1514,2022.0,5.0,10.0,2022-5-10,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 12404,1514,2022.0,5.0,10.0,2022-5-10,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Antony J. Blinken (Secretary of State, USA)",Not available 12406,1514,2022.0,7.0,19.0,2022-7-19,Attribution by EU institution/agency,"Political statement / report (e.g., on government / state agency websites)",Not available,EU (region),High Representative of the Union for Foreign Affairs and Security Policy (HR/VP),Not available 12401,1514,2022.0,5.0,10.0,2022-5-10,Attribution by EU institution/agency,"Political statement / report (e.g., on government / state agency websites)",Not available,EU (region),High Representative of the Union for Foreign Affairs and Security Policy (HR/VP),Not available 7188,1515,2022.0,4.0,27.0,2022-4-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 8146,1519,2021.0,3.0,3.0,2021-3-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 8116,1520,2022.0,2.0,27.0,2022-2-27,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 8116,1520,2022.0,2.0,27.0,2022-2-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 2362,1522,2022.0,4.0,27.0,2022-4-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 8125,1523,2022.0,3.0,20.0,2022-3-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 8125,1523,2022.0,3.0,20.0,2022-3-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,GhostSec,Not available 7183,1529,2022.0,6.0,17.0,2022-6-17,Attribution by receiver government / state entity,Domestic legal action,Arrests,Germany,Public Prosecutor General at the Federal Court of Justice,Not available 8153,1533,2022.0,4.0,1.0,2022-4-1,Attacker confirms,"Attribution given, type unclear",Not available,Unknown,Anonymous,Not available 7178,1537,2022.0,9.0,29.0,2022-9-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 7176,1538,2022.0,10.0,3.0,2022-10-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,South Africa,Sygnia,Not available 7177,1538,2022.0,1.0,10.0,2022-1-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 7175,1538,2022.0,6.0,23.0,2022-6-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Secureworks,Not available 4129,1539,2022.0,9.0,29.0,2022-9-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 7817,1541,2022.0,3.0,28.0,2022-3-28,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,"Yurii Shchyhol (Chairman of the State Service of Special Communication and Information Protection, UKR)",Not available 18571,1542,2022.0,9.0,30.0,2022-9-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 18572,1542,2022.0,9.0,28.0,2022-9-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Vietnam,GTSC,Not available 7170,1543,2022.0,10.0,2.0,2022-10-2,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,National Republican Army (NRA),Not available 7169,1544,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 4121,1546,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7792,1550,2022.0,2.0,27.0,2022-2-27,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Meta,Not available 7638,1553,2022.0,9.0,28.0,2022-9-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 16073,1554,2022.0,4.0,19.0,2022-4-19,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Conti Group,Not available 16074,1554,2022.0,5.0,20.0,2022-5-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,AdvIntel,Not available 14705,1555,2022.0,1.0,18.0,2022-1-18,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United Kingdom,Not available,Not available 7160,1558,2022.0,10.0,4.0,2022-10-4,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Recorded Future,Not available 12394,1561,2022.0,4.0,20.0,2022-4-20,IT-security community attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12394,1561,2022.0,4.0,20.0,2022-4-20,IT-security community attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,Canada,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12394,1561,2022.0,4.0,20.0,2022-4-20,IT-security community attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,Australia,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12394,1561,2022.0,4.0,20.0,2022-4-20,IT-security community attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12394,1561,2022.0,4.0,20.0,2022-4-20,IT-security community attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,New Zealand,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12395,1561,2022.0,3.0,31.0,2022-3-31,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,XakNet,Not available 7156,1562,2022.0,10.0,3.0,2022-10-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 7155,1563,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7492,1565,2022.0,1.0,31.0,2022-1-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 7153,1566,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11517,1567,2022.0,10.0,5.0,2022-10-5,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 5708,1569,2022.0,9.0,30.0,2022-9-30,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,VSOP,Not available 10753,1570,2022.0,4.0,28.0,2022-4-28,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 12193,1571,2022.0,2.0,28.0,2022-2-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 7815,1572,2022.0,3.0,4.0,2022-3-4,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Singapore,Cyfirma,Not available 7814,1572,2022.0,3.0,1.0,2022-3-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 11519,1573,2022.0,10.0,11.0,2022-10-11,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,"Frank J. Cilluffo (Academics, USA)",Not available 11518,1573,2022.0,10.0,10.0,2022-10-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 11520,1574,2022.0,10.0,8.0,2022-10-8,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Edaalate Ali,Not available 12393,1575,2022.0,2.0,25.0,2022-2-25,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United Kingdom,BBC,Not available 12393,1575,2022.0,2.0,25.0,2022-2-25,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United Kingdom,BBC,Not available 8494,1577,2022.0,4.0,29.0,2022-4-29,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Romania,Romanian Intelligence Service (SRI),Not available 8493,1577,2022.0,4.0,29.0,2022-4-29,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 7142,1580,2022.0,6.0,2.0,2022-6-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 7141,1581,2022.0,10.0,7.0,2022-10-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8145,1583,2022.0,2.0,25.0,2022-2-25,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 12259,1589,2022.0,10.0,13.0,2022-10-13,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 12260,1589,2023.0,8.0,8.0,2023-8-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Recorded Future 12392,1590,2022.0,5.0,4.0,2022-5-4,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bulgaria,"Vasil Velichkov (IT expert and government advisor, Bulgaria)",Not available 7973,1591,2022.0,10.0,18.0,2022-10-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Avertium Cyber Fusion Centers,Not available 7972,1591,2022.0,4.0,16.0,2022-4-16,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 8174,1594,2022.0,5.0,3.0,2022-5-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,v0g3lSec ,Not available 13285,1599,2022.0,5.0,,2022-5,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 7970,1603,2022.0,10.0,15.0,2022-10-15,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bulgaria,Prosecutor's Office,Not available 7970,1603,2022.0,10.0,15.0,2022-10-15,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bulgaria,"Ivan Geshev (Chief Public Prosecutor, BGR)",Not available 7971,1603,2022.0,10.0,15.0,2022-10-15,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bulgaria,Borislav Sarafov,Not available 7969,1603,2022.0,10.0,16.0,2022-10-16,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 7971,1603,2022.0,10.0,15.0,2022-10-15,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bulgaria,National Investigative Service,Not available 8175,1604,2022.0,5.0,10.0,2022-5-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 3579,1605,2022.0,10.0,13.0,2022-10-13,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Volexity,Not available 3578,1605,2022.0,10.0,13.0,2022-10-13,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 11521,1606,2022.0,10.0,18.0,2022-10-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,IronNet,Not available 7123,1607,2022.0,10.0,18.0,2022-10-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 8178,1609,2022.0,5.0,4.0,2022-5-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,CaucasNet,Not available 7706,1610,2022.0,5.0,,2022-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,RaHDit,Not available 7707,1610,2022.0,5.0,19.0,2022-5-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 7693,1611,2022.0,6.0,2.0,2022-6-2,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 17366,1613,2022.0,11.0,11.0,2022-11-11,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Australia,"Reece Kershaw (Australian Federal Police Commissioner, Australia)",Not available 17367,1613,2024.0,1.0,23.0,2024-1-23,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,US Department of the Treasury,Not available 7708,1614,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11523,1615,2022.0,10.0,18.0,2022-10-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,National Republican Army (NRA),Not available 7939,1618,2022.0,8.0,13.0,2022-8-13,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Russia,Killnet,Not available 16981,1626,2022.0,10.0,20.0,2022-10-20,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 7103,1627,2022.0,10.0,20.0,2022-10-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 11525,1628,2022.0,10.0,23.0,2022-10-23,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Atomic Energy Organization of Iran (AEOI),Not available 11524,1628,2022.0,10.0,21.0,2022-10-21,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,"Iran, Islamic Republic of",Black Reward,Not available 11528,1629,2022.0,10.0,21.0,2022-10-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Zscaler,Not available 11534,1630,2023.0,5.0,23.0,2023-5-23,Attribution by receiver government / state entity,Domestic legal action,Sanctions,United States,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 11533,1630,2022.0,4.0,14.0,2022-4-14,Attribution by receiver government / state entity,Domestic legal action,Sanctions,United States,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 11532,1630,2022.0,4.0,14.0,2022-4-14,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 8184,1631,2022.0,9.0,23.0,2022-9-23,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 5077,1635,2022.0,10.0,21.0,2022-10-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Singapore,Cyfirma,Not available 7646,1637,2022.0,7.0,19.0,2022-7-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Google Threat Analysis Group 5408,1638,2022.0,10.0,28.0,2022-10-28,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Poland,"Tomasz Paweł Grodzki (Marshal of the Senate, Poland)",Not available 7090,1639,2022.0,10.0,29.0,2022-10-29,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United Kingdom,Not available,Not available 8194,1640,2022.0,5.0,10.0,2022-5-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 8195,1641,2022.0,5.0,11.0,2022-5-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 8196,1642,2022.0,5.0,12.0,2022-5-12,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Unknown,Anonymous,Not available 11538,1643,2022.0,6.0,15.0,2022-6-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Japan Computer Emergency Response Team Coordination Center (JPCERT/CC),Not available 11538,1643,2022.0,6.0,15.0,2022-6-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Macnica Inc.,Not available 11537,1643,2021.0,11.0,27.0,2021-11-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 12390,1644,2022.0,5.0,11.0,2022-5-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 8198,1646,2022.0,5.0,14.0,2022-5-14,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 7644,1648,2022.0,3.0,6.0,2022-3-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Belarus,Belarusian Cyber Partisans,Not available 7827,1650,2022.0,3.0,8.0,2022-3-8,Not available,Not available,Not available,Not available,Not available,Not available 7641,1651,2022.0,3.0,11.0,2022-3-11,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Rostec,Not available 11539,1652,2022.0,11.0,8.0,2022-11-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 7803,1653,2022.0,11.0,3.0,2022-11-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 12389,1654,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7637,1657,2022.0,3.0,16.0,2022-3-16,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Russia,Not available,Not available 7077,1658,2022.0,11.0,10.0,2022-11-10,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Mandiant,Not available 18849,1659,2022.0,11.0,10.0,2022-11-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 7013,1660,2022.0,11.0,10.0,2022-11-10,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Mandiant,Not available 7012,1661,2022.0,11.0,10.0,2022-11-10,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Mandiant,Not available 7011,1662,2022.0,11.0,10.0,2022-11-10,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Mandiant,Not available 12388,1663,2022.0,8.0,30.0,2022-8-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 12387,1663,2022.0,6.0,17.0,2022-6-17,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 8817,1664,2022.0,7.0,17.0,2022-7-17,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,CitizenLab,Not available 8817,1664,2022.0,7.0,17.0,2022-7-17,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Digital Reach,Not available 8817,1664,2022.0,7.0,17.0,2022-7-17,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Digital Reach,Not available 8817,1664,2022.0,7.0,17.0,2022-7-17,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,CitizenLab,Not available 8817,1664,2022.0,7.0,17.0,2022-7-17,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,iLaw,Not available 8817,1664,2022.0,7.0,17.0,2022-7-17,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,iLaw,Not available 8492,1665,2022.0,11.0,,2022-11,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,From Russia with Love (FRwL)/Z-Team/UAC-0118,Not available 8491,1665,2022.0,11.0,11.0,2022-11-11,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 11613,1667,2022.0,11.0,12.0,2022-11-12,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Al-Toufan,Not available 11614,1667,2022.0,11.0,12.0,2022-11-12,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bahrain,Ministry of Interior,Not available 11541,1668,2022.0,11.0,10.0,2022-11-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Lookout,Not available 7002,1669,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7001,1670,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7000,1671,2022.0,11.0,9.0,2022-11-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Trend Micro,Not available 11546,1672,2022.0,11.0,9.0,2022-11-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Trend Micro,Not available 4438,1673,2022.0,11.0,15.0,2022-11-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 11549,1674,2022.0,11.0,17.0,2022-11-17,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Unknown,Not available 11548,1674,2022.0,11.0,16.0,2022-11-16,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 6999,1676,2022.0,11.0,16.0,2022-11-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 7635,1679,2022.0,3.0,17.0,2022-3-17,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,AnonGh0st,Not available 6996,1680,2022.0,11.0,18.0,2022-11-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Belarus,Belarusian Cyber Partisans,Not available 7631,1682,2022.0,9.0,7.0,2022-9-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Not available 7628,1683,2022.0,8.0,8.0,2022-8-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 6990,1688,2022.0,11.0,22.0,2022-11-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 12146,1689,2022.0,11.0,23.0,2022-11-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 12148,1690,2022.0,8.0,11.0,2022-8-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Albania,Killnet,Not available 12148,1690,2022.0,8.0,11.0,2022-8-11,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Albania,Killnet,Not available 12148,1690,2022.0,8.0,11.0,2022-8-11,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Albania,Killnet,Not available 12148,1690,2022.0,8.0,11.0,2022-8-11,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Albania,Killnet,Not available 6987,1691,2021.0,2.0,28.0,2021-2-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Not available 12147,1693,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12143,1694,2022.0,4.0,18.0,2022-4-18,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,CitizenLab,Not available 11552,1699,2022.0,8.0,25.0,2022-8-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 7794,1700,2022.0,8.0,17.0,2022-8-17,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Energoatom (Ukrainian nuclear power operator),Not available 11554,1701,2022.0,5.0,19.0,2022-5-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,Not available 7585,1702,2022.0,2.0,4.0,2022-2-4,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 11555,1703,2022.0,8.0,,2022-8,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Killnet,Not available 11555,1703,2022.0,8.0,,2022-8,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Killnet,Not available 12142,1704,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Avast,Not available 12141,1704,2022.0,6.0,29.0,2022-6-29,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Norway,National Security Authority (NSM; NOR),Not available 12140,1704,2022.0,7.0,1.0,2022-7-1,Attribution by receiver government / state entity,"Attribution given, type unclear",Not available,Norway,National Security Authority (NSM) (Norway),Not available 6842,1709,2022.0,11.0,1.0,2022-11-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 6835,1715,2022.0,9.0,7.0,2022-9-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Not available 7938,1716,2022.0,11.0,18.0,2022-11-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 6832,1720,2023.0,1.0,23.0,2023-1-23,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 6831,1720,2022.0,6.0,29.0,2022-6-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Elliptic,Not available 6829,1722,2022.0,11.0,28.0,2022-11-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 11560,1725,2022.0,11.0,25.0,2022-11-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Black Reward,Not available 7580,1726,2022.0,8.0,23.0,2022-8-23,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 11615,1732,2022.0,12.0,1.0,2022-12-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 7577,1733,2022.0,5.0,3.0,2022-5-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Not available 5417,1735,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 5419,1736,2022.0,12.0,5.0,2022-12-5,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Not available,Not available 5419,1736,2022.0,12.0,5.0,2022-12-5,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Not available,Not available 6814,1737,2022.0,5.0,16.0,2022-5-16,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Anonymous,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Team OneFist,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Anonymous,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Anonymous,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Team OneFist,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Anonymous,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Media-based attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Team OneFist,Not available 7575,1738,2022.0,9.0,3.0,2022-9-3,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Team OneFist,Not available 8199,1740,2022.0,8.0,29.0,2022-8-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Team OneFist,Not available 8199,1740,2022.0,8.0,29.0,2022-8-29,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Team OneFist,Not available 16556,1741,2022.0,10.0,27.0,2022-10-27,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of","Abolhassan Firuzabadi (Secretary of the Supreme Council of Cyberspace, Iran)",Not available 16555,1741,2022.0,10.0,30.0,2022-10-30,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of","Gholamreza Jalali (Head of Civil Defence, Iran)",Not available 16554,1741,2022.0,10.0,26.0,2022-10-26,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,"Gonjeshke Darande = Predatory Sparrow/Indra (Israeli Defence Forces, Unit 8200)",Not available 5510,1751,2022.0,10.0,5.0,2022-10-5,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Secureworks,Not available 5424,1752,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 6811,1753,2022.0,12.0,6.0,2022-12-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 6810,1754,2022.0,12.0,5.0,2022-12-5,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,Human Rights Watch,Not available 6810,1754,2022.0,12.0,5.0,2022-12-5,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,Security Lab,Not available 6810,1754,2022.0,12.0,5.0,2022-12-5,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Human Rights Watch,Not available 6810,1754,2022.0,12.0,5.0,2022-12-5,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Security Lab,Not available 14425,1756,2022.0,12.0,7.0,2022-12-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 6807,1757,2021.0,5.0,25.0,2021-5-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 12136,1777,2022.0,9.0,29.0,2022-9-29,IT-security community attributes attacker,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Check Point Research,Check Point 12137,1777,2022.0,9.0,7.0,2022-9-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 12136,1777,2022.0,9.0,29.0,2022-9-29,IT-security community attributes attacker,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Killnet,Check Point 12138,1779,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7509,1781,2022.0,9.0,9.0,2022-9-9,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,hdr0,Not available 7504,1782,2022.0,5.0,19.0,2022-5-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Check Point 8200,1785,2022.0,5.0,13.0,2022-5-13,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 6800,1786,2022.0,5.0,15.0,2022-5-15,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Andriy Moskalenko (Deputy Mayor of Lviv; UKR),Not available 6799,1786,2022.0,5.0,14.0,2022-5-14,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Andriy Sadowyj (Mayor of Lviv; UKR),Not available 12135,1788,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 5914,1789,2022.0,12.0,6.0,2022-12-6,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Netherlands,Forum for Democracy (FvD),Not available 6795,1790,2022.0,12.0,9.0,2022-12-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Positive Technologies,Not available 6794,1790,2022.0,12.0,9.0,2022-12-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Not available 6792,1791,2022.0,12.0,9.0,2022-12-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Not available 6793,1791,2022.0,12.0,9.0,2022-12-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Positive Technologies,Not available 12134,1792,2022.0,11.0,19.0,2022-11-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Daixin Team,Not available 12133,1793,2022.0,12.0,6.0,2022-12-6,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Mexico,"Mirelle Montes Agredano (President of the Board of Directors and Member of the Congress of Jalisco, Mexico)",Not available 6790,1794,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11563,1795,2022.0,12.0,9.0,2022-12-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Secureworks,Not available 11562,1795,2022.0,3.0,9.0,2022-3-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,eSentire,Not available 7500,1797,2022.0,9.0,10.0,2022-9-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,IT Army of Ukraine,Not available 7500,1797,2022.0,9.0,10.0,2022-9-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 11564,1800,2022.0,12.0,14.0,2022-12-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 11565,1801,2022.0,12.0,14.0,2022-12-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Proofpoint,Not available 5613,1802,2022.0,12.0,15.0,2022-12-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 7495,1804,2022.0,9.0,19.0,2022-9-19,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Mykhailo Fedorov (Minister of Digital Transformation of Ukraine),Not available 7495,1804,2022.0,9.0,19.0,2022-9-19,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 11566,1805,2022.0,11.0,10.0,2022-11-10,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,"MJ Emanuel (Cybersecurity and Infrastructure Security Agency (CISA), United States)",Not available 12132,1807,2022.0,12.0,18.0,2022-12-18,Attribution by receiver government / state entity,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Ukraine,CERT-UA,Not available 6199,1808,2022.0,12.0,20.0,2022-12-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Trend Micro,Not available 6787,1809,2022.0,12.0,16.0,2022-12-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,Elastic Security Labs,Not available 6787,1809,2022.0,12.0,16.0,2022-12-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Elastic Security Labs,Not available 12131,1813,2022.0,12.0,11.0,2022-12-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,PLAY,Not available 11573,1814,2022.0,12.0,19.0,2022-12-19,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Israel,Israeli Public Broadcasting Corporation (IPBC),Not available 11574,1814,2022.0,11.0,24.0,2022-11-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Moses Staff,Not available 6208,1815,2022.0,12.0,22.0,2022-12-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Securonix,Not available 6661,1816,2022.0,12.0,27.0,2022-12-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 6660,1817,2022.0,10.0,29.0,2022-10-29,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous,Not available 6659,1818,2022.0,11.0,7.0,2022-11-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 6658,1819,2020.0,3.0,18.0,2020-3-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Digital Revolution,Not available 17914,1820,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9156,1821,2022.0,12.0,27.0,2022-12-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 8201,1822,2022.0,5.0,23.0,2022-5-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous,Not available 8097,1823,2022.0,3.0,4.0,2022-3-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous,Not available 11575,1824,2022.0,12.0,25.0,2022-12-25,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Lockbit,Not available 12130,1825,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 6652,1826,2022.0,12.0,29.0,2022-12-29,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Italy,Red Hot Cyber,Not available 6651,1827,2022.0,12.0,24.0,2022-12-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,DCSO,Not available 6761,1828,2023.0,1.0,5.0,2023-1-5,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 10752,1829,2023.0,1.0,2.0,2023-1-2,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Cuba,Anonymous Cuba,Not available 10752,1829,2023.0,1.0,2.0,2023-1-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Cuba,Anonymous Cuba,Not available 6322,1830,2023.0,1.0,3.0,2023-1-3,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Brazil,Department of Technology (DETEC) of Municipal Government of Petropolis,Not available 10461,1834,2023.0,1.0,11.0,2023-1-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Singapore,Group-IB,Group-IB 10462,1834,2023.0,5.0,31.0,2023-5-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Singapore,Group-IB,Group-IB 6647,1835,2023.0,1.0,12.0,2023-1-12,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 6648,1835,2023.0,1.0,10.0,2023-1-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,NoName057(16),Not available 8819,1836,2023.0,1.0,19.0,2023-1-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,China,Mandiant,Not available 12124,1842,2023.0,1.0,13.0,2023-1-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 12125,1842,2023.0,1.0,12.0,2023-1-12,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 12123,1842,2023.0,1.0,13.0,2023-1-13,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Czech Republic,"Pavel Klimes (Avast Threat Labs, Czech Republic)",Not available 12122,1842,2023.0,1.0,11.0,2023-1-11,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 12126,1842,2023.0,1.0,13.0,2023-1-13,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Czech Republic,"Marek Vala (National Cyber and Information Security Agency, Czech Republic)",Not available 8816,1843,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16700,1847,2022.0,4.0,14.0,2022-4-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 7488,1849,2022.0,12.0,20.0,2022-12-20,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Not available,Not available 7487,1849,2022.0,11.0,1.0,2022-11-1,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,"Yuriy Butusov (Journalist and War Correspondent, Ukraine)",Not available 8796,1850,2023.0,1.0,18.0,2023-1-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Palo Alto Networks 9739,1851,2023.0,1.0,18.0,2023-1-18,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,CERT-UA,Not available 12119,1852,2023.0,1.0,18.0,2023-1-18,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Kazakhstan,"Samal Ibrayeva (Editor-in-chief of Ulysmedia, Kazakhstan)",Not available 12121,1853,2022.0,4.0,20.0,2022-4-20,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Czech Republic,"Vit Rakusan (Minister of the Interior, Czech Republic)",Not available 12120,1853,2022.0,4.0,19.0,2022-4-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 17162,1854,2022.0,4.0,6.0,2022-4-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybereason,Not available 12112,1855,2023.0,1.0,19.0,2023-1-19,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Canada,"P.J. Akeeagok (Premier of Nunavut, Canada)",Not available 7048,1858,2023.0,1.0,17.0,2023-1-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,China,Qi An Xin Technology Group,Not available 12108,1859,2023.0,1.0,19.0,2023-1-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Switzerland,Maia Arson Crimew,Not available 7046,1860,2023.0,1.0,25.0,2023-1-25,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 12107,1861,2023.0,1.0,26.0,2023-1-26,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Christopher Wray (Director of the Federal Bureau of Investigation, United States)",Not available 12107,1861,2023.0,1.0,26.0,2023-1-26,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Merrick Garland (Attorney General, United States)",Not available 12107,1861,2023.0,1.0,26.0,2023-1-26,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Lisa Monaco (Deputy Attorney General, United States)",Not available 15072,1862,2022.0,1.0,26.0,2022-1-26,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 12106,1863,2023.0,1.0,25.0,2023-1-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 7044,1864,2022.0,1.0,26.0,2022-1-26,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 9738,1865,2023.0,1.0,27.0,2023-1-27,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Slovakia,ESET,Not available 6746,1867,2023.0,2.0,1.0,2023-2-1,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Netherlands,Dutch National Cybersecurity Centre (NCSC),Not available 6744,1867,2023.0,1.0,30.0,2023-1-30,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Netherlands,Z-Cert,Not available 6745,1867,2023.0,1.0,23.0,2023-1-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 6741,1868,2023.0,1.0,30.0,2023-1-30,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States, US Department of Health and Human Services,Not available 6743,1868,2023.0,1.0,30.0,2023-1-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 6741,1868,2023.0,1.0,30.0,2023-1-30,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Health Sector Cyber Security Coordination Center (HC3),Not available 6741,1868,2023.0,1.0,30.0,2023-1-30,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"John Riggi (National Advisor for Cybersecurity and Risk of American Hospital Association, United States)",Not available 6741,1868,2023.0,1.0,30.0,2023-1-30,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Health Sector Cyber Security Coordination Center (HC3),Not available 6741,1868,2023.0,1.0,30.0,2023-1-30,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United States, US Department of Health and Human Services,Not available 6741,1868,2023.0,1.0,30.0,2023-1-30,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"John Riggi (National Advisor for Cybersecurity and Risk of American Hospital Association, United States)",Not available 6742,1868,2023.0,1.0,28.0,2023-1-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 12105,1871,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 6740,1876,2023.0,1.0,31.0,2023-1-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,ESET 7038,1877,2023.0,1.0,31.0,2023-1-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 11583,1878,2023.0,1.0,31.0,2023-1-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 7033,1879,2023.0,1.0,31.0,2023-1-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 7029,1880,2023.0,1.0,31.0,2023-1-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Finland,WithSecure,Not available 8228,1881,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7028,1882,2023.0,2.0,2.0,2023-2-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,EclecticIQ,Not available 8229,1883,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 6777,1884,2023.0,2.0,2.0,2023-2-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Trend Micro,Not available 8230,1885,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17915,1886,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17916,1887,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8231,1888,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12103,1889,2023.0,2.0,6.0,2023-2-6,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Italy,Italian Government,Not available 12104,1889,2023.0,2.0,6.0,2023-2-6,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Italy,Agenzia Per La Cybersicurezza Nazionale,Not available 6767,1890,2023.0,2.0,3.0,2023-2-3,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Netherlands,Dutch Federal Police (Politie),Not available 6766,1891,2023.0,2.0,3.0,2023-2-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 17917,1892,,,,Not available,Not available,Not available,Not available,Canada,Not available,Not available 6764,1893,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8235,1894,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8794,1898,2023.0,2.0,6.0,2023-2-6,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 10002,1899,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8237,1901,2023.0,2.0,8.0,2023-2-8,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Switzerland,Swiss Federal Railways (SBB),Not available 7403,1902,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7400,1903,2023.0,2.0,11.0,2023-2-11,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Edaalate Ali,Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",Cybersecurity and Infrastructure Security Agency (CISA),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Security Agency (NSA),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,U.S. Department of Health and Human Services (HHS),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",National Security Agency (NSA),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",U.S. Department of Health and Human Services (HHS),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",National Intelligence Service (NIS),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",Federal Bureau of Investigation (FBI),Not available 8793,1904,2023.0,2.0,9.0,2023-2-9,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,"John Hultquist (Vice-President Mandian Threat Intelligence, United States)",Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Republic of Korea Defense Security Agency (DSA),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",Republic of Korea Defense Security Agency (DSA),Not available 8792,1904,2023.0,2.0,9.0,2023-2-9,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Intelligence Service (NIS),Not available 7061,1905,2023.0,2.0,10.0,2023-2-10,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Mexico,"Salvador Leyva (Public Defender's Office, Mexico)",Not available 8791,1906,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13570,1907,2023.0,2.0,,2023-2,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 7017,1908,2023.0,2.0,13.0,2023-2-13,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Microsoft,Microsoft Security Intelligence 7399,1909,2023.0,2.0,9.0,2023-2-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BlackBerry Research and Intelligence Team,BlackBerry Research and Intelligence Team 17007,1910,2023.0,2.0,12.0,2023-2-12,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Storm-1084 fka DEV-1084/DarkBit (MOIS),Not available 17008,1910,2023.0,3.0,7.0,2023-3-7,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Israel,Israeli National Cyber Directorate (INCD),Not available 8820,1911,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 7537,1912,2023.0,2.0,14.0,2023-2-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,AhnLab,Not available 8242,1913,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8243,1914,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18377,1915,2023.0,2.0,13.0,2023-2-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 8821,1916,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8246,1917,2023.0,2.0,8.0,2023-2-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Proofpoint,Not available 8247,1918,2023.0,2.0,15.0,2023-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Dragos,Not available 8249,1920,2023.0,2.0,15.0,2023-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Dragos,Not available 8250,1921,2023.0,2.0,15.0,2023-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Dragos,Not available 8251,1922,2023.0,2.0,15.0,2023-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Dragos,Not available 8252,1923,2023.0,2.0,15.0,2023-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Dragos,Not available 8253,1924,2023.0,2.0,14.0,2023-2-14,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Bahrain,Al-Toufan,Not available 17312,1925,2023.0,2.0,14.0,2023-2-14,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Sudan,Anonymous Sudan (Storm-1359) < Killnet,Not available 17313,1925,2023.0,3.0,30.0,2023-3-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Trustwave,Not available 16174,1926,2023.0,2.0,16.0,2023-2-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 16175,1927,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8782,1928,2023.0,2.0,16.0,2023-2-16,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Morocco,Agence Marocaine de Presse (MAP),Not available 7395,1929,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16176,1930,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16177,1931,2023.0,2.0,13.0,2023-2-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Royal Ransomware Group,Not available 16159,1932,2023.0,2.0,18.0,2023-2-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 16158,1933,2023.0,2.0,18.0,2023-2-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,China,Qi An Pangu Lab,Not available 17311,1934,2023.0,2.0,19.0,2023-2-19,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Sweden,Marcus Murray,Not available 17310,1934,2023.0,3.0,30.0,2023-3-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Trustwave,Not available 17309,1934,2023.0,2.0,18.0,2023-2-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Sudan,Anonymous Sudan (Storm-1359) < Killnet,Not available 16154,1935,2023.0,3.0,2.0,2023-3-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,PLAY,Not available 16152,1936,2023.0,2.0,21.0,2023-2-21,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 16151,1937,2023.0,2.0,20.0,2023-2-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Resecurity,Not available 16150,1938,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16149,1939,2023.0,2.0,14.0,2023-2-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Zscaler,Not available 16148,1940,2023.0,2.0,22.0,2023-2-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 16147,1941,2023.0,2.0,22.0,2023-2-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 16146,1941,2023.0,2.0,21.0,2023-2-21,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 16144,1942,2023.0,2.0,22.0,2023-2-22,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Not available,Not available 16145,1942,2023.0,2.0,22.0,2023-2-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous,Not available 16143,1943,2022.0,9.0,11.0,2022-9-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,hdr0,Not available 16142,1944,2022.0,7.0,21.0,2022-7-21,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 16138,1945,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Avast,Not available 16138,1945,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Czech Republic,Avast,Not available 16137,1946,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Czech Republic,Avast,Not available 16137,1946,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Avast,Not available 16136,1946,2022.0,6.0,27.0,2022-6-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 17918,1947,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16133,1948,2023.0,2.0,23.0,2023-2-23,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,SSSCIP,Not available 16134,1948,2023.0,2.0,23.0,2023-2-23,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 16132,1949,2023.0,2.0,20.0,2023-2-20,Receiver attributes attacker,"Attribution given, type unclear",Not available,United States,"Brian A. Nester (President and CEO of Lehigh Valley Health Network, United States)",Not available 16131,1950,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Avast,Not available 16131,1950,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Czech Republic,Avast,Not available 16130,1951,2023.0,2.0,23.0,2023-2-23,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,Financial Times,Not available 16127,1952,2022.0,7.0,8.0,2022-7-8,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Killnet,Not available 16126,1953,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Avast,Not available 16126,1953,2022.0,9.0,6.0,2022-9-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Czech Republic,Avast,Not available 16125,1956,2023.0,2.0,23.0,2023-2-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 16123,1957,2023.0,2.0,24.0,2023-2-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,CH01,Not available 16124,1957,2023.0,2.0,25.0,2023-2-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous,Not available 16122,1958,2023.0,2.0,23.0,2023-2-23,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Netherlands,Dutch Federal Police (Politie),Not available 16121,1958,2023.0,1.0,23.0,2023-1-23,Attribution by receiver government / state entity,Domestic legal action,Arrests,Netherlands,Dutch Federal Police (Politie),Not available 16118,1959,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16117,1960,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16116,1961,2023.0,2.0,22.0,2023-2-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,AlphV,Not available 16115,1962,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16114,1963,2022.0,5.0,25.0,2022-5-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,XakNet,Not available 16113,1964,2023.0,2.0,23.0,2023-2-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Menlo Security,Not available 11161,1965,2023.0,2.0,27.0,2023-2-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BlackBerry Research and Intelligence Team,Not available 16111,1966,2023.0,2.0,26.0,2023-2-26,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Sudan,Anonymous Sudan (Storm-1359) < Killnet,Not available 16112,1966,2023.0,2.0,23.0,2023-2-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Sweden,Truesec,Not available 17919,1967,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17920,1968,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17921,1969,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16107,1971,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11616,1972,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16106,1973,2023.0,2.0,28.0,2023-2-28,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,US Department of State,Not available 16105,1973,2023.0,2.0,27.0,2023-2-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Not available,Not available 16104,1974,2023.0,2.0,28.0,2023-2-28,Attribution by international organization,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Southeast Asia (region),ASEAN,Not available 9406,1975,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16103,1976,2023.0,2.0,27.0,2023-2-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,China,Qihoo 360,Not available 16102,1977,2023.0,2.0,27.0,2023-2-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,Not available 16101,1978,2023.0,2.0,27.0,2023-2-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,Not available 8080,1979,2022.0,4.0,23.0,2022-4-23,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8076,1980,2022.0,3.0,18.0,2022-3-18,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 8326,1981,2022.0,3.0,7.0,2022-3-7,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8326,1981,2022.0,3.0,7.0,2022-3-7,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8326,1981,2022.0,3.0,7.0,2022-3-7,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8326,1981,2022.0,3.0,7.0,2022-3-7,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8056,1982,2022.0,5.0,2.0,2022-5-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8054,1983,2022.0,4.0,7.0,2022-4-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8051,1984,2022.0,4.0,7.0,2022-4-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8043,1986,2022.0,4.0,7.0,2022-4-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8044,1987,2022.0,4.0,7.0,2022-4-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8028,1988,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8026,1993,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16520,1994,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8024,1995,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12092,1996,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17922,1997,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15600,2000,2023.0,3.0,1.0,2023-3-1,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Poland,"Janusz Cieszyński (Secretary of State, Government Plenipotentiary for Cyber Security)",Not available 10018,2001,2023.0,2.0,15.0,2023-2-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 16099,2002,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16097,2003,2023.0,3.0,1.0,2023-3-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Trend Micro,Not available 16096,2004,2023.0,2.0,27.0,2023-2-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 16094,2005,2023.0,3.0,1.0,2023-3-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 8167,2006,2022.0,4.0,4.0,2022-4-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,NB65,Not available 12090,2007,2023.0,2.0,15.0,2023-2-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Clop,Not available 12088,2007,2023.0,3.0,23.0,2023-3-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Clop,Not available 12087,2007,2023.0,3.0,24.0,2023-3-24,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United States,TechCrunch,Not available 12086,2007,2023.0,2.0,10.0,2023-2-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Clop,Not available 12091,2007,2023.0,3.0,16.0,2023-3-16,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Clop,Not available 12089,2007,2023.0,3.0,2.0,2023-3-2,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,TechCrunch,Not available 16092,2008,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16091,2009,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16088,2010,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16085,2011,2023.0,3.0,2.0,2023-3-2,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 16085,2011,2023.0,3.0,2.0,2023-3-2,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 16082,2012,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8137,2013,2020.0,4.0,20.0,2020-4-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,GhostSec,Not available 16081,2014,2023.0,3.0,2.0,2023-3-2,Attribution by receiver government / state entity,Domestic legal action,Arrests,Australia,Australian Federal Police,Not available 16081,2014,2023.0,3.0,2.0,2023-3-2,Attribution by receiver government / state entity,Domestic legal action,Indictment,Australia,Australian Federal Police,Not available 8164,2015,2022.0,4.0,18.0,2022-4-18,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,NB65,Not available 8161,2016,2022.0,4.0,27.0,2022-4-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,NB65,Not available 18974,2017,2023.0,3.0,4.0,2023-3-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Vice Society,Not available 16079,2019,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11308,2020,2022.0,3.0,6.0,2022-3-6,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Spain,Cybersecurity Agency of Catalonia,Not available 10019,2021,2023.0,3.0,28.0,2023-3-28,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Snatch Ransomware Group,Not available 16078,2022,2023.0,3.0,3.0,2023-3-3,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Poland,"Jacek Karnowski (Mayor of Sopot, Poland)",Not available 16077,2022,2023.0,3.0,3.0,2023-3-3,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Poland,Wyborcza,Not available 16076,2023,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13580,2024,2022.0,3.0,22.0,2022-3-22,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 13580,2024,2022.0,3.0,22.0,2022-3-22,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 13580,2024,2022.0,3.0,22.0,2022-3-22,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 13580,2024,2022.0,3.0,22.0,2022-3-22,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 13569,2025,2022.0,3.0,15.0,2022-3-15,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 13569,2025,2022.0,3.0,15.0,2022-3-15,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 13569,2025,2022.0,3.0,15.0,2022-3-15,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 13569,2025,2022.0,3.0,15.0,2022-3-15,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 16075,2026,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8351,2027,2022.0,3.0,18.0,2022-3-18,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8351,2027,2022.0,3.0,18.0,2022-3-18,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8319,2028,2022.0,3.0,25.0,2022-3-25,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8319,2028,2022.0,3.0,25.0,2022-3-25,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8319,2028,2022.0,3.0,25.0,2022-3-25,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8319,2028,2022.0,3.0,25.0,2022-3-25,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8317,2029,2022.0,3.0,28.0,2022-3-28,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8317,2029,2022.0,3.0,28.0,2022-3-28,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8317,2029,2022.0,3.0,28.0,2022-3-28,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8317,2029,2022.0,3.0,28.0,2022-3-28,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8503,2030,2022.0,4.0,6.0,2022-4-6,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8503,2030,2022.0,4.0,6.0,2022-4-6,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8503,2030,2022.0,4.0,6.0,2022-4-6,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8503,2030,2022.0,4.0,6.0,2022-4-6,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8502,2031,2022.0,4.0,6.0,2022-4-6,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8502,2031,2022.0,4.0,6.0,2022-4-6,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8502,2031,2022.0,4.0,6.0,2022-4-6,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8502,2031,2022.0,4.0,6.0,2022-4-6,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8501,2032,2022.0,5.0,18.0,2022-5-18,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8501,2032,2022.0,5.0,18.0,2022-5-18,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8501,2032,2022.0,5.0,18.0,2022-5-18,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8501,2032,2022.0,5.0,18.0,2022-5-18,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8500,2033,2022.0,6.0,8.0,2022-6-8,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8500,2033,2022.0,6.0,8.0,2022-6-8,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8500,2033,2022.0,6.0,8.0,2022-6-8,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 8500,2033,2022.0,6.0,8.0,2022-6-8,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 8499,2034,2023.0,1.0,29.0,2023-1-29,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 8781,2035,2023.0,3.0,6.0,2023-3-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 17923,2036,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8779,2038,2023.0,3.0,7.0,2023-3-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Not available 8778,2039,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8773,2040,2023.0,3.0,7.0,2023-3-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 8757,2041,2023.0,3.0,1.0,2023-3-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Qilin Ransomware Group,Not available 8756,2042,2023.0,1.0,,2023-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BianLian Ransomware Group,Not available 8755,2043,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8754,2044,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12774,2045,2023.0,3.0,7.0,2023-3-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 8730,2046,2023.0,2.0,26.0,2023-2-26,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,"Alexis Rapin (Cybersecurits researcher at RDandurand, Canada)",Not available 8729,2046,2023.0,2.0,25.0,2023-2-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,We are Russian Hackers Community,Not available 16813,2047,2023.0,3.0,6.0,2023-3-6,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,IntelBroker,Not available 8726,2048,2023.0,3.0,9.0,2023-3-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 8727,2048,2022.0,11.0,29.0,2022-11-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 8724,2050,2023.0,3.0,,2023-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BianLian Ransomware Group,Not available 16070,2051,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8722,2053,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 10020,2055,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15598,2056,2023.0,3.0,10.0,2023-3-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Vice Society,Not available 8716,2057,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16069,2060,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8981,2061,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8776,2063,2023.0,3.0,10.0,2023-3-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,EclecticIQ,Not available 8775,2064,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 8774,2065,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16068,2066,2023.0,3.0,14.0,2023-3-14,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Microsoft,Not available 16065,2067,2023.0,3.0,14.0,2023-3-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Cisco Talos 16066,2067,2023.0,10.0,25.0,2023-10-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Cisco Talos Intelligence 16063,2068,2023.0,3.0,14.0,2023-3-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 16062,2069,2023.0,3.0,15.0,2023-3-15,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 16058,2070,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16032,2071,2023.0,3.0,15.0,2023-3-15,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 15597,2073,2023.0,3.0,16.0,2023-3-16,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United States,MalwareBytes,Not available 10021,2074,2023.0,3.0,16.0,2023-3-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 10105,2075,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9275,2076,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17924,2077,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9278,2079,2023.0,3.0,14.0,2023-3-14,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 8901,2080,2023.0,3.0,15.0,2023-3-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Phoenix,Not available 12988,2082,2023.0,3.0,20.0,2023-3-20,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,The New York Times,Not available 12988,2082,2023.0,3.0,20.0,2023-3-20,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Unnamed Greek officials,Not available 12988,2082,2023.0,3.0,20.0,2023-3-20,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Greece,The New York Times,Not available 12988,2082,2023.0,3.0,20.0,2023-3-20,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Greece,Unnamed Greek officials,Not available 10024,2083,2023.0,3.0,13.0,2023-3-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,PLAY,Not available 16031,2084,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16029,2085,2023.0,3.0,21.0,2023-3-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 16030,2085,2023.0,5.0,10.0,2023-5-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,MalwareBytes,MalwareBytes 17925,2086,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,Federal Office for the Protection of the Constitution (BfV),Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",Federal Office for the Protection of the Constitution (BfV),Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",National Intelligence Service (NIS),Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,National Intelligence Service (NIS),Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",Federal Office for the Protection of the Constitution (BfV),Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",National Intelligence Service (NIS),Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,National Intelligence Service (NIS),Not available 16028,2087,2023.0,3.0,14.0,2023-3-14,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,Federal Office for the Protection of the Constitution (BfV),Not available 16027,2088,2023.0,3.0,23.0,2023-3-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,QGroup,Not available 16027,2088,2023.0,3.0,23.0,2023-3-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,SentinelOne,Not available 16027,2088,2023.0,3.0,23.0,2023-3-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,QGroup,Not available 16027,2088,2023.0,3.0,23.0,2023-3-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 16026,2089,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16025,2092,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16024,2093,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16022,2095,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Puerto Rico,Puerto Rico Aqueduct and Sewer Authority (PRASA),Not available 16023,2095,2023.0,3.0,24.0,2023-3-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Vice Society,Not available 16021,2096,2023.0,3.0,21.0,2023-3-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cyble Research and Intelligence Labs (CRIL),Not available 16020,2096,2023.0,3.0,9.0,2023-3-9,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,India,"Yogesh Londhe (IT researcher, India)",Not available 16019,2097,2023.0,3.0,23.0,2023-3-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Trend Micro,Not available 16018,2099,2023.0,3.0,24.0,2023-3-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Intezer Analyze,Not available 9280,2100,2023.0,3.0,27.0,2023-3-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 9281,2101,2023.0,2.0,21.0,2023-2-21,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,"Kevin Crews (Sheriff of Washington County Sheriff's Office, United States)",Not available 9282,2101,2023.0,2.0,27.0,2023-2-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 9283,2102,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9284,2103,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16017,2104,2023.0,3.0,24.0,2023-3-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat,Not available 16016,2105,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16015,2107,2023.0,3.0,28.0,2023-3-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Jacob,Not available 12084,2108,2023.0,3.0,29.0,2023-3-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,CrowdStrike,Not available 12083,2108,2023.0,3.0,30.0,2023-3-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Huntress,Not available 12081,2108,2023.0,3.0,29.0,2023-3-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Sophos,Not available 12080,2108,2023.0,3.0,30.0,2023-3-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 12082,2108,2023.0,4.0,3.0,2023-4-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 10026,2109,2023.0,9.0,22.0,2023-9-22,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Amanda Harrison (Spokeswoman of Wheat Ridge),Not available 9453,2110,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12085,2111,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17293,2112,2023.0,3.0,19.0,2023-3-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 17294,2112,2023.0,3.0,30.0,2023-3-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Trustwave,Not available 12034,2113,2023.0,3.0,31.0,2023-3-31,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,D#nut Leaks,Not available 9145,2114,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 10167,2115,2023.0,3.0,27.0,2023-3-27,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,InformNapalm,Not available 16014,2116,2023.0,3.0,30.0,2023-3-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Proofpoint,Not available 10173,2117,2023.0,4.0,2.0,2023-4-2,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 10173,2117,2023.0,4.0,2.0,2023-4-2,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 10173,2117,2023.0,4.0,2.0,2023-4-2,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Jeffrey Carr (US cyber expert/author),Not available 10173,2117,2023.0,4.0,2.0,2023-4-2,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 15594,2118,2023.0,3.0,31.0,2023-3-31,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Vice Society,Not available 12079,2119,2023.0,3.0,14.0,2023-3-14,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,9Near,Not available 17150,2120,2023.0,4.0,4.0,2023-4-4,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 10744,2121,2023.0,4.0,4.0,2023-4-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 9212,2122,2023.0,4.0,3.0,2023-4-3,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 11241,2123,2023.0,4.0,3.0,2023-4-3,Attribution by receiver government / state entity,Domestic legal action,Arrests,Spain,Spanish National Police (CNP),Not available 9261,2124,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 10168,2125,2023.0,4.0,3.0,2023-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Cyber Resistance aka the Ukrainian Cyber Alliance,Not available 12077,2126,2023.0,4.0,5.0,2023-4-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 12078,2126,2023.0,4.0,4.0,2023-4-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 11242,2127,2023.0,6.0,30.0,2023-6-30,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Japan,Unnamed Japanese Government Officials,Not available 16013,2128,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 10175,2129,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9328,2131,2023.0,4.0,3.0,2023-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 9317,2132,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11586,2134,2023.0,4.0,7.0,2023-4-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 9320,2136,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11458,2137,2023.0,4.0,10.0,2023-4-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 9782,2138,2023.0,4.0,5.0,2023-4-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Money Message,Not available 10742,2139,2023.0,4.0,6.0,2023-4-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 9324,2140,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9325,2141,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13639,2142,2023.0,4.0,4.0,2023-4-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 9360,2143,2023.0,4.0,10.0,2023-4-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Cyber Resistance aka the Ukrainian Cyber Alliance,Not available 9359,2145,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 10027,2146,2023.0,4.0,11.0,2023-4-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 10028,2147,2023.0,4.0,12.0,2023-4-12,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 9410,2149,2023.0,4.0,13.0,2023-4-13,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Poland,CERT Polska,Not available 9410,2149,2023.0,4.0,13.0,2023-4-13,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Poland,Military Counterintelligence Service of Poland,Not available 10169,2150,2023.0,4.0,13.0,2023-4-13,Attribution by third-party,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United States,Jeffrey Carr (US cyber expert/author),Not available 16012,2151,2023.0,4.0,14.0,2023-4-14,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 10179,2152,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16011,2153,2023.0,4.0,15.0,2023-4-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat/ALPHV,Not available 16010,2154,2023.0,4.0,14.0,2023-4-14,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United States,BianLian Ransomware Group,Not available 11587,2155,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Uptycs,Not available 9434,2156,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9430,2157,2023.0,4.0,6.0,2023-4-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 9435,2159,2023.0,4.0,18.0,2023-4-18,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,The New York Times,Not available 10768,2160,2023.0,4.0,18.0,2023-4-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Cybersecurity and Infrastructure Security Agency (CISA),Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Federal Bureau of Investigation (FBI),Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,National Security Agency (NSA),Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Security Agency (NSA),Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 9475,2161,2023.0,4.0,18.0,2023-4-18,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17979,2163,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16009,2164,2023.0,4.0,19.0,2023-4-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 9463,2165,2023.0,4.0,20.0,2023-4-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 11064,2166,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 9468,2167,2023.0,4.0,20.0,2023-4-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 16385,2168,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 10737,2169,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16246,2170,2023.0,4.0,19.0,2023-4-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Google Threat Analysis Group 10177,2171,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12076,2172,2023.0,4.0,24.0,2023-4-24,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Cyber National Mission Force (CNMF) and Cybersecurity and Infrastructure Security Agency (CISA),Not available 10029,2179,2023.0,4.0,9.0,2023-4-9,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,US Department of Defense (Pentagon),Not available 9539,2180,2023.0,4.0,26.0,2023-4-26,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,ESET 10735,2181,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17308,2182,2023.0,4.0,26.0,2023-4-26,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 10442,2183,,,,Not available,Not available,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,PLAY,Not available 9544,2184,2023.0,4.0,27.0,2023-4-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Switzerland,PRODAFT,Not available 9557,2185,2023.0,4.0,26.0,2023-4-26,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Romania,Bitdefender,Not available 9559,2187,2023.0,4.0,26.0,2023-4-26,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,LockBit,Not available 15977,2188,2023.0,4.0,26.0,2023-4-26,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Finland,WithSecure,Not available 15976,2189,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15972,2190,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15968,2191,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15967,2192,2023.0,4.0,27.0,2023-4-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Lookout,Lookout 15966,2193,2023.0,5.0,1.0,2023-5-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Akira Ransomware Group,Not available 15962,2194,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15959,2195,2023.0,4.0,26.0,2023-4-26,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,Not available 15958,2195,2023.0,5.0,1.0,2023-5-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Check Point 15956,2196,2023.0,4.0,13.0,2023-4-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 15957,2196,2023.0,4.0,18.0,2023-4-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat/ALPHV,Not available 15955,2197,2023.0,5.0,3.0,2023-5-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Royal Ransomware Group,Not available 15948,2198,2023.0,5.0,2.0,2023-5-2,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Amnesty International,Not available 15907,2199,2023.0,5.0,2.0,2023-5-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Trend Micro,Not available 15906,2200,2023.0,4.0,29.0,2023-4-29,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,CERT-UA,Not available 15905,2202,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15904,2203,2023.0,4.0,,2023-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Altahrea Team,Not available 15903,2204,2023.0,5.0,1.0,2023-5-1,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,AvosLocker,Not available 15902,2205,2023.0,4.0,18.0,2023-4-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Royal Ransomware Group,Not available 15901,2206,2023.0,5.0,4.0,2023-5-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 15900,2207,2023.0,4.0,20.0,2023-4-20,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Royal Ransomware Group,Not available 15899,2208,2023.0,,,2023,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Trigona Ransomware Group,Not available 15898,2209,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15897,2210,2023.0,5.0,4.0,2023-5-4,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,SentinelOne Labs 10102,2211,2023.0,5.0,6.0,2023-5-6,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Not available,Not available 15896,2212,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15895,2213,2023.0,5.0,6.0,2023-5-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,BianLian Ransomware Group,Not available 15894,2214,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15771,2215,2023.0,5.0,5.0,2023-5-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 15770,2216,2023.0,5.0,4.0,2023-5-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 15613,2217,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15612,2218,2023.0,5.0,2.0,2023-5-2,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 11068,2219,2023.0,4.0,,2023-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BianLian Ransomware Group,Not available 15611,2220,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15610,2221,2023.0,5.0,6.0,2023-5-6,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Microsoft,Microsoft 15609,2222,2023.0,5.0,5.0,2023-5-5,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Curry County,Not available 15608,2223,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15607,2224,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17002,2225,2023.0,5.0,9.0,2023-5-9,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,US Department of Justice (DoJ),Not available 15604,2226,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15603,2227,2023.0,5.0,3.0,2023-5-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,ESET 12073,2228,2023.0,5.0,10.0,2023-5-10,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",Korean National Police Agency (KNPA),Not available 12074,2228,2021.0,7.0,,2021-7,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Korea, Republic of","Ha Tae-keung (Member of the National Assembly, South Korea)",Not available 11070,2229,2023.0,5.0,10.0,2023-5-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,BianLian Ransomware Group,Not available 15601,2230,2023.0,5.0,10.0,2023-5-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Romania,Bitdefender,Not available 15768,2231,2023.0,5.0,10.0,2023-5-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,MalwareBytes,MalwareBytes 11459,2232,2023.0,5.0,11.0,2023-5-11,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,Bleeping Computer,Not available 15639,2233,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11172,2234,2023.0,5.0,11.0,2023-5-11,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Mysterious Team Bangladesh,Not available 11174,2235,2023.0,5.0,9.0,2023-5-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Akira Ransomware Group,Not available 15638,2236,2023.0,5.0,10.0,2023-5-10,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Germany,Not available,Not available 15637,2237,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15636,2238,2023.0,5.0,7.0,2023-5-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 15635,2239,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15634,2240,2023.0,5.0,,2023-5,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Bl00dy Ransomware Gang,Not available 15633,2241,2023.0,5.0,3.0,2023-5-3,Attacker confirms,"Attribution given, type unclear",Not available,Not available,Monti Ransomware Group,Not available 15632,2242,2023.0,4.0,8.0,2023-4-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Money Message,Not available 15631,2243,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15630,2244,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15627,2245,2023.0,4.0,27.0,2023-4-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,RA Group,Not available 15622,2246,2023.0,5.0,15.0,2023-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 15621,2250,2023.0,5.0,15.0,2023-5-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 15620,2251,2023.0,5.0,16.0,2023-5-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Not available 15619,2253,2023.0,5.0,12.0,2023-5-12,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,LockBit,Not available 15618,2254,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15617,2255,2023.0,4.0,22.0,2023-4-22,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Black Basta Ransomware Gang,Not available 15614,2256,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15578,2257,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15593,2258,2023.0,6.0,4.0,2023-6-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 17971,2259,2023.0,5.0,16.0,2023-5-16,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,United States District Court District of New Jersey,Not available 17971,2259,2023.0,5.0,16.0,2023-5-16,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 17971,2259,2023.0,5.0,16.0,2023-5-16,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,United States District Court for the District of Columbia,Not available 11179,2260,2023.0,5.0,18.0,2023-5-18,Attribution by receiver government / state entity,Domestic legal action,Indictment,Russia,District Court Rostov-on-Don,Not available 11178,2260,2023.0,5.0,18.0,2023-5-18,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Federal Security Service (FSB),Not available 15572,2261,2023.0,5.0,16.0,2023-5-16,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,United States District Court District of New Jersey,Not available 15572,2261,2023.0,5.0,16.0,2023-5-16,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 15572,2261,2023.0,5.0,16.0,2023-5-16,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,United States District Court for the District of Columbia,Not available 11066,2262,2023.0,5.0,,2023-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Black Basta Ransomware Gang,Not available 15569,2263,2023.0,5.0,12.0,2023-5-12,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Karakurt,Not available 15568,2264,2023.0,5.0,19.0,2023-5-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 15554,2265,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15553,2266,2023.0,5.0,20.0,2023-5-20,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,CERT-UA,Not available 15553,2266,2023.0,5.0,20.0,2023-5-20,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,SSSCIP,Not available 15552,2268,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15550,2269,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15549,2270,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15547,2271,2023.0,5.0,22.0,2023-5-22,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United States,The New York Times,Not available 15546,2272,2023.0,5.0,23.0,2023-5-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,ClearSky,ClearSky 15545,2273,2023.0,4.0,,2023-4,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,India,Insurance Information Bureau of India,Not available 15543,2274,2023.0,5.0,23.0,2023-5-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 15542,2275,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,New Zealand National Cyber Security Centre (NCSC-NZ),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,National Security Agency (NSA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Cybersecurity and Infrastructure Security Agency (CISA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Federal Bureau of Investigation (FBI),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Australian Cyber Security Centre (ACSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Canadian Centre for Cyber Security (CCCS),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Canadian Centre for Cyber Security (CCCS),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,United Kingdom’s National Cyber Security Centre (NCSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,New Zealand National Cyber Security Centre (NCSC-NZ),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,New Zealand,Cybersecurity and Infrastructure Security Agency (CISA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,New Zealand,United Kingdom’s National Cyber Security Centre (NCSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,New Zealand,Federal Bureau of Investigation (FBI),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,New Zealand National Cyber Security Centre (NCSC-NZ),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,New Zealand,Australian Cyber Security Centre (ACSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,New Zealand,Canadian Centre for Cyber Security (CCCS),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,United Kingdom’s National Cyber Security Centre (NCSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Canadian Centre for Cyber Security (CCCS),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Australian Cyber Security Centre (ACSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Federal Bureau of Investigation (FBI),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Australian Cyber Security Centre (ACSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,Cybersecurity and Infrastructure Security Agency (CISA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Australia,National Security Agency (NSA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,New Zealand,New Zealand National Cyber Security Centre (NCSC-NZ),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,New Zealand,National Security Agency (NSA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Federal Bureau of Investigation (FBI),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,New Zealand National Cyber Security Centre (NCSC-NZ),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Security Agency (NSA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Canadian Centre for Cyber Security (CCCS),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 18185,2276,2023.0,5.0,24.0,2023-5-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Australian Cyber Security Centre (ACSC),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,National Security Agency (NSA),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 18186,2276,2023.0,5.0,24.0,2023-5-24,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Cybersecurity and Infrastructure Security Agency (CISA),Not available 15521,2277,2021.0,7.0,,2021-7,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Unknown,Not available 15522,2277,2019.0,,,2019,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Kenya,Unknown,Not available 15520,2278,2023.0,5.0,22.0,2023-5-22,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 15519,2279,2023.0,5.0,26.0,2023-5-26,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,BlackByte,Not available 15519,2279,2023.0,5.0,26.0,2023-5-26,Contested attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,BlackByte,Not available 15518,2280,2023.0,5.0,23.0,2023-5-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,AhnLab 15517,2281,2023.0,5.0,24.0,2023-5-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Check Point 15516,2282,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15515,2283,2023.0,5.0,24.0,2023-5-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Indonesia,Hacktivist Indonesia,Not available 15514,2284,2023.0,5.0,24.0,2023-5-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Vice Society,Not available 15513,2285,2023.0,6.0,24.0,2023-6-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Fortinet,Not available 11180,2286,2023.0,5.0,25.0,2023-5-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,SentinelOne Labs 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,Access Now,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,CyberHUB-AM,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Access Now,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,"Ruben Muradyan (Mobile Security Researcher, Armenia)",Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,CitizenLab,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,Security Lab,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,CitizenLab,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Security Lab,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,"Ruben Muradyan (Mobile Security Researcher, Armenia)",Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,Security Lab,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,"Ruben Muradyan (Mobile Security Researcher, Armenia)",Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,CitizenLab,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Armenia,Access Now,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Armenia,CyberHUB-AM,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,Access Now,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,CyberHUB-AM,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,CyberHUB-AM,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Armenia,"Ruben Muradyan (Mobile Security Researcher, Armenia)",Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Armenia,Security Lab,Not available 15512,2287,2023.0,5.0,25.0,2023-5-25,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Armenia,CitizenLab,Not available 15511,2288,2023.0,5.0,25.0,2023-5-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat/ALPHV,Not available 15510,2289,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15509,2290,2023.0,5.0,26.0,2023-5-26,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bangladesh,Mysterious Team Bangladesh,Not available 15502,2291,2023.0,5.0,21.0,2023-5-21,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 15503,2291,2023.0,5.0,29.0,2023-5-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,India,Cloud SEK,Not available 15501,2292,2023.0,4.0,28.0,2023-4-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,RansomHouse,Not available 15500,2292,2023.0,4.0,23.0,2023-4-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BianLian Ransomware Group,Not available 15499,2293,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17218,2294,2023.0,5.0,29.0,2023-5-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,GhyamSarnegouni = Uprising till Overthrow,Not available 15494,2295,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15479,2296,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15478,2297,2023.0,5.0,28.0,2023-5-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 15477,2298,2023.0,5.0,27.0,2023-5-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Not available,Not available 15476,2299,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15475,2300,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15474,2301,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15473,2302,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11181,2308,2023.0,5.0,29.0,2023-5-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bangladesh,Mysterious Team Bangladesh,Not available 11182,2309,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11185,2310,2023.0,5.0,29.0,2023-5-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Bangladesh,Mysterious Team Bangladesh,Not available 15472,2311,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15470,2312,2023.0,5.0,29.0,2023-5-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Ukrainian CyberFront,Not available 15471,2312,2023.0,5.0,29.0,2023-5-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,sudo rm -R,Not available 15467,2313,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15466,2314,2023.0,5.0,28.0,2023-5-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Bl00dy Ransomware Gang,Not available 15465,2316,2023.0,6.0,1.0,2023-6-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Russia,Federal Security Service (FSB),Not available 15465,2316,2023.0,6.0,1.0,2023-6-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Russia,Federal Protective Service (FSO),Not available 15464,2317,2023.0,6.0,1.0,2023-6-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Unkown,Not available 18372,2318,2023.0,6.0,2.0,2023-6-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 18373,2318,2023.0,6.0,5.0,2023-6-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Clop Ransomware Group,Not available 18374,2318,2023.0,6.0,5.0,2023-6-5,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Microsoft,Microsoft 15463,2319,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15462,2320,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15461,2321,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15460,2322,2023.0,6.0,2.0,2023-6-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,EclecticIQ,Not available 15459,2323,2023.0,5.0,31.0,2023-5-31,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,RansomHouse,Not available 17307,2324,2022.0,5.0,24.0,2022-5-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 15457,2325,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14391,2327,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14392,2328,2023.0,6.0,6.0,2023-6-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Adlumin,Not available 13763,2330,2023.0,6.0,6.0,2023-6-6,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,"Sean M. Spiller (Mayor of Montclair, United States)",Not available 13764,2331,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13765,2335,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13766,2336,2023.0,6.0,6.0,2023-6-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Elliptic,Elliptic 13767,2336,2023.0,8.0,22.0,2023-8-22,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 13768,2337,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13769,2338,2023.0,6.0,8.0,2023-6-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 11716,2339,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11717,2340,2023.0,6.0,8.0,2023-6-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Cyber Anarchy Squad,Not available 14291,2341,2023.0,6.0,9.0,2023-6-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Daixin Team,Not available 11719,2342,2023.0,6.0,9.0,2023-6-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Elastic Security Labs,Not available 11720,2343,2023.0,6.0,9.0,2023-6-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Elastic Security Labs,Not available 11721,2343,2022.0,3.0,7.0,2022-3-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Elastic Security Labs,Not available 12063,2344,2023.0,6.0,12.0,2023-6-12,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 12062,2345,2023.0,6.0,7.0,2023-6-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 17890,2346,2023.0,5.0,22.0,2023-5-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,PLAY,Not available 17891,2346,2023.0,5.0,23.0,2023-5-23,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Switzerland,Watson,Not available 11726,2347,2023.0,6.0,12.0,2023-6-12,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,South Africa,Development Bank of South Africa (DBSA),Not available 11726,2347,2023.0,6.0,12.0,2023-6-12,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,South Africa,Development Bank of South Africa (DBSA),Not available 11727,2349,2023.0,6.0,13.0,2023-6-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 11728,2350,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11731,2352,2023.0,6.0,1.0,2023-6-1,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United Kingdom,PC Gamer,Not available 11729,2352,2023.0,3.0,12.0,2023-3-12,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,GSC Game World,Not available 11730,2352,2023.0,6.0,1.0,2023-6-1,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,GSC Game World,Not available 12599,2353,2023.0,6.0,15.0,2023-6-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 11733,2354,2023.0,6.0,15.0,2023-6-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 17306,2355,2023.0,6.0,8.0,2023-6-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 17305,2355,2023.0,6.0,6.0,2023-6-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 17303,2355,2023.0,6.0,5.0,2023-6-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 17304,2355,2023.0,6.0,9.0,2023-6-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 12996,2356,2022.0,3.0,2.0,2022-3-2,IT-security community attributes attacker,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Russia,Positive Technologies,Positive Technologies 12997,2357,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13770,2358,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13771,2360,2023.0,6.0,16.0,2023-6-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Singapore,Cyfirma,Not available 13773,2361,2023.0,6.0,16.0,2023-6-16,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States, US Department of Health and Human Services,Not available 13774,2362,2023.0,6.0,19.0,2023-6-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Killnet,Not available 13775,2363,2023.0,6.0,14.0,2023-6-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Palo Alto Networks 13780,2365,2023.0,6.0,20.0,2023-6-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,Recorded Future,Recorded Future 13780,2365,2023.0,6.0,20.0,2023-6-20,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,CERT-UA,Recorded Future 13780,2365,2023.0,6.0,20.0,2023-6-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Recorded Future 13780,2365,2023.0,6.0,20.0,2023-6-20,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,Recorded Future,Recorded Future 13780,2365,2023.0,6.0,20.0,2023-6-20,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Recorded Future 13780,2365,2023.0,6.0,20.0,2023-6-20,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Recorded Future 13780,2365,2023.0,6.0,20.0,2023-6-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Recorded Future 13780,2365,2023.0,6.0,20.0,2023-6-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,CERT-UA,Recorded Future 11460,2366,2023.0,6.0,16.0,2023-6-16,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 11462,2367,2023.0,6.0,14.0,2023-6-14,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 13777,2368,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15592,2369,2023.0,6.0,,2023-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 14396,2370,2023.0,6.0,21.0,2023-6-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,AhnLab 14397,2371,2023.0,5.0,24.0,2023-5-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Arab Emirates,Hackmanac,Not available 14398,2372,2023.0,5.0,24.0,2023-5-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Arab Emirates,Hackmanac,Hackmanac 14399,2373,2023.0,6.0,21.0,2023-6-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,Not available 14400,2374,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11221,2376,2023.0,6.0,22.0,2023-6-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Check Point 11463,2378,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11464,2379,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11465,2380,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11466,2381,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11467,2382,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11468,2383,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14148,2384,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12056,2385,2023.0,6.0,23.0,2023-6-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,SiegedSec,Not available 11471,2386,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11472,2387,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12058,2388,2023.0,6.0,26.0,2023-6-26,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Germany,"Kevin Kühnert (General Secretary of the Social Democratic Party of Germany (SPD), Germany)",Not available 12057,2388,2023.0,6.0,26.0,2023-6-26,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Microsoft,Microsoft 15591,2389,2023.0,6.0,23.0,2023-6-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Rhysida,Not available 11482,2390,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14401,2391,2023.0,6.0,21.0,2023-6-21,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Italy,Basile Diagnostic Center for Nuclear Medicine,Not available 11476,2392,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12055,2393,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 11478,2395,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15590,2397,2023.0,6.0,24.0,2023-6-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Rhysida Ransomware Group,Not available 11479,2398,2023.0,6.0,28.0,2023-6-28,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 11479,2398,2023.0,6.0,28.0,2023-6-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 11479,2398,2023.0,6.0,28.0,2023-6-28,Contested attribution,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 11479,2398,2023.0,6.0,28.0,2023-6-28,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 12054,2399,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17976,2400,2023.0,6.0,29.0,2023-6-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,LockBit,Not available 17977,2400,2024.0,2.0,20.0,2024-2-20,Attribution by third-party,Domestic legal action,Indictment,United States,United States District Court District of New Jersey,Not available 17978,2400,2023.0,6.0,28.0,2023-6-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Bassterlord,Not available 14404,2401,2023.0,6.0,28.0,2023-6-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 14405,2402,2023.0,6.0,30.0,2023-6-30,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 14405,2402,2023.0,6.0,30.0,2023-6-30,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Communications-Electronic Security Group (CESG),Not available 14406,2403,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14407,2404,2023.0,6.0,22.0,2023-6-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,CrowdStrike,Not available 14408,2405,2023.0,6.0,28.0,2023-6-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,SiegedSec,Not available 14409,2407,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14410,2409,2023.0,6.0,25.0,2023-6-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 15589,2410,2023.0,6.0,29.0,2023-6-29,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Spain,Diario de Arganda,Not available 17230,2411,2023.0,5.0,3.0,2023-5-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,PLAY,Not available 14415,2412,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17846,2413,2023.0,7.0,4.0,2023-7-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Lockbit 3.0,Not available 14419,2414,2023.0,7.0,5.0,2023-7-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Cyclops,Not available 11481,2415,2023.0,,,2023,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 14420,2416,2023.0,7.0,6.0,2023-7-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Proofpoint,Not available 14422,2417,2023.0,7.0,1.0,2023-7-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,SiegedSec,Not available 14424,2418,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14426,2419,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14427,2420,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14412,2421,2023.0,7.0,9.0,2023-7-9,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,United Kingdom,Financial Times,Not available 14428,2422,2023.0,6.0,23.0,2023-6-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat/ALPHV,Not available 14429,2423,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14430,2425,2023.0,6.0,5.0,2023-6-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Snatch Ransomware Group,Not available 18781,2427,2023.0,7.0,11.0,2023-7-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 13361,2429,2015.0,6.0,23.0,2015-6-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,FireEye,Not available 14432,2430,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14433,2431,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14434,2433,2023.0,7.0,17.0,2023-7-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,F.A.C.C.T.,Not available 14435,2434,2023.0,7.0,12.0,2023-7-12,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,JumpCloud,Not available 14436,2434,2023.0,7.0,20.0,2023-7-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 14437,2434,2023.0,7.0,20.0,2023-7-20,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,CrowdStrike,Not available 14438,2434,2023.0,7.0,23.0,2023-7-23,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 14439,2434,2023.0,7.0,20.0,2023-7-20,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Mandiant,Not available 14440,2435,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14441,2436,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14442,2437,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14443,2438,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14444,2440,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14446,2441,2023.0,7.0,19.0,2023-7-19,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Microsoft,Microsoft 14445,2441,2023.0,7.0,18.0,2023-7-18,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,CERT-UA,Not available 12288,2445,2023.0,7.0,18.0,2023-7-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Positive Technologies,Not available 14447,2446,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14448,2448,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14449,2449,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14450,2450,2023.0,7.0,24.0,2023-7-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,AhnLab,Not available 14451,2451,2023.0,7.0,17.0,2023-7-17,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 18455,2453,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14632,2454,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17234,2455,2023.0,7.0,26.0,2023-7-26,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,Wuhan Municipal Emergency Management Bureau,Qihoo 360 17234,2455,2023.0,7.0,26.0,2023-7-26,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,Qihoo 360,Qihoo 360 17234,2455,2023.0,7.0,26.0,2023-7-26,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,Wuhan Municipal Emergency Management Bureau,Qihoo 360 17234,2455,2023.0,7.0,26.0,2023-7-26,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,National Computer Virus Emergency Response Center (CVERC),Qihoo 360 17234,2455,2023.0,7.0,26.0,2023-7-26,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,Qihoo 360,Qihoo 360 17234,2455,2023.0,7.0,26.0,2023-7-26,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,National Computer Virus Emergency Response Center (CVERC),Qihoo 360 14634,2456,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14643,2457,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14644,2458,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14645,2459,2023.0,8.0,22.0,2023-8-22,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 15908,2460,2023.0,7.0,29.0,2023-7-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Cyber Avengers / Cyber Av3ngers,Not available 14647,2461,2023.0,6.0,19.0,2023-6-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoEscape Ransomware Group,Not available 14648,2462,2023.0,7.0,27.0,2023-7-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 16464,2463,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14661,2468,2023.0,7.0,20.0,2023-7-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 14663,2469,2023.0,8.0,1.0,2023-8-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 14665,2470,2023.0,7.0,29.0,2023-7-29,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,US Department of Justice (DoJ),Not available 14666,2471,2023.0,7.0,31.0,2023-7-31,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 14670,2472,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14853,2473,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15588,2474,2023.0,7.0,,2023-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 14855,2475,2023.0,7.0,30.0,2023-7-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 14856,2476,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15587,2477,2023.0,8.0,,2023-8,Not available,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 14864,2478,2023.0,8.0,7.0,2023-8-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 14865,2479,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14866,2480,2023.0,9.0,,2023-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Ragnar Locker,Not available 18466,2481,2024.0,3.0,25.0,2024-3-25,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 14868,2482,2023.0,8.0,8.0,2023-8-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Recorded Future 14869,2483,2023.0,8.0,7.0,2023-8-7,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,National Security Agency (NSA),Not available 14874,2484,2023.0,8.0,8.0,2023-8-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Not available 14877,2487,2023.0,6.0,6.0,2023-6-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 17298,2488,2023.0,7.0,19.0,2023-7-19,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 14882,2489,2023.0,6.0,10.0,2023-6-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 14883,2490,2023.0,7.0,24.0,2023-7-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,SiegedSec,Not available 14885,2491,2023.0,8.0,7.0,2023-8-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Not available,Not available 14884,2491,2023.0,8.0,6.0,2023-8-6,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Not available,Not available 14886,2492,2023.0,8.0,10.0,2023-8-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 14887,2493,2023.0,8.0,22.0,2023-8-22,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 14888,2495,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14889,2496,2023.0,8.0,10.0,2023-8-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 14890,2497,2023.0,7.0,26.0,2023-7-26,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Thesnake02,Not available 14891,2498,2023.0,8.0,10.0,2023-8-10,Receiver attributes attacker,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Akira Ransomware Group,Not available 14892,2499,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17716,2500,2020.0,1.0,17.0,2020-1-17,Attribution by third-party,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Japan,Japan`s Computer Emergency Response Team (CERT),Not available 14893,2503,2023.0,8.0,13.0,2023-8-13,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Akhira,Not available 14894,2504,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13268,2506,2023.0,7.0,25.0,2023-7-25,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Medusa Ransomware Group,Not available 17876,2508,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14896,2509,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14897,2510,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15093,2511,2023.0,8.0,17.0,2023-8-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BlackBerry Research and Intelligence Team,Not available 14898,2513,2023.0,8.0,17.0,2023-8-17,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Adlumin,Not available 14899,2514,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14900,2515,2023.0,8.0,17.0,2023-8-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Trellix,Not available 14901,2516,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoEscape Ransomware Group,Not available 14902,2518,2023.0,5.0,22.0,2023-5-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Royal Ransomware Group,Not available 14903,2519,2023.0,8.0,19.0,2023-8-19,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 14905,2520,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14906,2521,2023.0,8.0,20.0,2023-8-20,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 14907,2522,2023.0,7.0,25.0,2023-7-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 14908,2523,2023.0,7.0,23.0,2023-7-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 15586,2527,2023.0,9.0,10.0,2023-9-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 14910,2528,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14911,2529,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14912,2532,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14932,2534,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14933,2535,2023.0,8.0,22.0,2023-8-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 14934,2539,2023.0,8.0,24.0,2023-8-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Not available 14935,2540,2023.0,8.0,24.0,2023-8-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 14936,2541,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14937,2542,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14938,2543,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14939,2544,2023.0,8.0,,2023-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,LockBit,Not available 16278,2546,2023.0,8.0,29.0,2023-8-29,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 16278,2546,2023.0,8.0,29.0,2023-8-29,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,US Department of Justice (DoJ),Not available 14941,2547,2023.0,8.0,30.0,2023-8-30,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 14942,2548,2023.0,8.0,30.0,2023-8-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 15094,2554,2023.0,8.0,30.0,2023-8-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 15098,2555,2023.0,8.0,30.0,2023-8-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 15105,2556,2023.0,8.0,30.0,2023-8-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Trend Micro,Trend Micro 15108,2557,2023.0,8.0,30.0,2023-8-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 15109,2558,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15110,2559,2023.0,8.0,31.0,2023-8-31,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Germany,ZDF,Not available 15110,2559,2023.0,8.0,31.0,2023-8-31,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Germany,Der Spiegel,Not available 15110,2559,2023.0,8.0,31.0,2023-8-31,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Germany,Der Standard,Not available 17832,2561,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15114,2562,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15117,2563,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15120,2564,2023.0,8.0,29.0,2023-8-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Rapid7,Not available 15121,2565,2023.0,8.0,29.0,2023-8-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Rapid7,Not available 15122,2566,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15125,2567,2023.0,8.0,27.0,2023-8-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Net-Worker Alliance,Not available 15126,2570,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15127,2571,2023.0,9.0,4.0,2023-9-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 15128,2572,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15130,2573,2023.0,7.0,28.0,2023-7-28,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,CrowdStrike,Not available 15131,2574,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15132,2575,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15154,2576,2023.0,8.0,29.0,2023-8-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Sudan,Anonymous Sudan (Storm-1359) < Killnet,Not available 15154,2576,2023.0,8.0,29.0,2023-8-29,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Sudan,Anonymous Sudan (Storm-1359) < Killnet,Not available 15155,2577,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 12999,2578,2023.0,8.0,23.0,2023-8-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,HommedeLombre,Not available 15157,2579,2023.0,8.0,6.0,2023-8-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Singapore,Group-IB,Not available 15158,2580,2023.0,9.0,6.0,2023-9-6,Attribution by receiver government / state entity,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Spain,Not available,Not available 15159,2580,2023.0,9.0,6.0,2023-9-6,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Spain,"Juan Bueno (Councillor for Finance and Digital Transformation of Seville, Spain)",Not available 15162,2581,2023.0,8.0,13.0,2023-8-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 15163,2582,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15164,2584,2023.0,9.0,1.0,2023-9-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 12998,2585,2023.0,9.0,1.0,2023-9-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 15165,2586,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15166,2587,2023.0,9.0,6.0,2023-9-6,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,"Jason Feldwick (Principal of St Augustine Academy, United Kingdom)",Not available 15167,2588,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15168,2589,2023.0,9.0,1.0,2023-9-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 15169,2590,2023.0,9.0,1.0,2023-9-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 15170,2591,2023.0,9.0,1.0,2023-9-1,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 15171,2592,2023.0,9.0,8.0,2023-9-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Pakistan,Team Insane PK,Not available 15172,2592,2023.0,9.0,9.0,2023-9-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Pakistan,Team Insane PK,Not available 15173,2595,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15174,2596,2023.0,9.0,6.0,2023-9-6,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 15175,2600,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15176,2601,2023.0,9.0,11.0,2023-9-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 15177,2603,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15178,2606,2023.0,9.0,12.0,2023-9-12,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Not available 15179,2607,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15180,2608,2023.0,9.0,7.0,2023-9-7,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 15180,2608,2023.0,9.0,7.0,2023-9-7,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 15180,2608,2023.0,9.0,7.0,2023-9-7,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cyber National Mission Force (CNMF),Not available 13095,2610,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13096,2613,2023.0,9.0,14.0,2023-9-14,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Australia,"Dean Kimpton (Chief Executive of Auckland Transport, Australia)",Not available 13097,2616,2023.0,9.0,13.0,2023-9-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 13098,2616,2023.0,9.0,13.0,2023-9-13,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,"Eric Caire (Member of the National Assembly of Quebec and Minister for Cybersecurity and Digital Economy, Canada)",Not available 13099,2616,2023.0,9.0,13.0,2023-9-13,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Canada,Government Cyber Defence Centre (CGCD) of Quebec,Not available 14035,2618,2023.0,9.0,13.0,2023-9-13,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Global (region),CitizenLab,Not available 14035,2618,2023.0,9.0,13.0,2023-9-13,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,CitizenLab,Not available 14035,2618,2023.0,9.0,13.0,2023-9-13,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Canada,Access Now,Not available 14035,2618,2023.0,9.0,13.0,2023-9-13,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Global (region),Access Now,Not available 14034,2619,2023.0,9.0,14.0,2023-9-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 14020,2620,2023.0,9.0,14.0,2023-9-14,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Colombia,"Saul Kattan (High Presidential Adviser for Digital Transformation, Colombia)",Not available 14019,2621,2023.0,9.0,,2023-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,USDoD,Not available 14018,2622,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14017,2623,2023.0,9.0,14.0,2023-9-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 13985,2624,2023.0,9.0,14.0,2023-9-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 13984,2625,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13983,2626,2023.0,9.0,18.0,2023-9-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BlackBerry Research and Intelligence Team,BlackBerry Research and Intelligence Team 13982,2628,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13981,2629,2023.0,9.0,19.0,2023-9-19,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Mandiant,Mandiant 13980,2630,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13979,2631,2023.0,4.0,28.0,2023-4-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,BlackCat/ALPHV,Not available 13943,2632,2023.0,9.0,17.0,2023-9-17,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 13637,2633,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13636,2634,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13635,2635,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15243,2636,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,PwC,Not available 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,SentinelOne Labs 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,QGroup 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,QGroup,SentinelOne Labs 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,QGroup,QGroup 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,SentinelOne,QGroup 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,SentinelOne,SentinelOne Labs 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,QGroup,QGroup 15243,2636,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 15243,2636,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 15243,2636,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,PwC,Not available 15243,2636,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,SentinelOne,Not available 15243,2636,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,Microsoft,Not available 15242,2636,2023.0,9.0,21.0,2023-9-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Germany,QGroup,SentinelOne Labs 13629,2638,2023.0,9.0,22.0,2023-9-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 13628,2639,2023.0,9.0,21.0,2023-9-21,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Monti Ransomware Group,Not available 13627,2641,2023.0,9.0,21.0,2023-9-21,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Bermuda,David Burt (Premier of Bermuda),Not available 13599,2642,2023.0,9.0,22.0,2023-9-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Palo Alto Networks 13598,2643,2023.0,9.0,22.0,2023-9-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Palo Alto Networks 13595,2644,2023.0,9.0,22.0,2023-9-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Palo Alto Networks 13942,2645,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13941,2646,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13940,2647,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13939,2648,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13938,2649,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13937,2650,2023.0,9.0,21.0,2023-9-21,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Estonia,Estonian Information System Authority (RIA),Not available 13594,2651,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18045,2652,2024.0,3.0,14.0,2024-3-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Elliptic,Elliptic 13578,2653,2023.0,9.0,19.0,2023-9-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Recorded Future 16230,2654,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Rhysida Ransomware Group,Not available 13577,2655,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Japan National Policy Agency (NPA),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,National Security Agency (NSA),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Security Agency (NSA),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Cybersecurity and Infrastructure Security Agency (CISA),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Federal Bureau of Investigation (FBI),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Japan National Policy Agency (NPA),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,National Center of Incident Readiness and Strategy for Cybersecurity (NISC),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Center of Incident Readiness and Strategy for Cybersecurity (NISC),Not available 13714,2656,2023.0,9.0,26.0,2023-9-26,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 16694,2657,2023.0,9.0,,2023-9,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Dark Angel Ransomware Group,Not available 13716,2658,2023.0,9.0,28.0,2023-9-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 13717,2659,2023.0,9.0,29.0,2023-9-29,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,New Zealand,Auckland Transport,Not available 13718,2660,2023.0,9.0,28.0,2023-9-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,IT Army of Ukraine,Not available 13936,2661,2023.0,9.0,29.0,2023-9-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,ESET 13935,2662,2023.0,10.0,1.0,2023-10-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,LockBit,Not available 13934,2663,2023.0,10.0,2.0,2023-10-2,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,Threat Fabric,Threat Fabric 13933,2664,2023.0,9.0,29.0,2023-9-29,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Japan,Trend Micro,Trend Micro 14660,2665,2023.0,10.0,3.0,2023-10-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Cuba Ransomware,Not available 14512,2666,2023.0,10.0,1.0,2023-10-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Killnet,Not available 13930,2667,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13929,2668,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13928,2669,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13927,2670,2023.0,10.0,4.0,2023-10-4,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Elastic Security Labs,Elastic Security Labs 13926,2671,2023.0,10.0,5.0,2023-10-5,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,ESET 14518,2672,2023.0,10.0,4.0,2023-10-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,hdr0,Not available 13877,2673,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13876,2674,2023.0,10.0,5.0,2023-10-5,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,EclecticIQ,EclecticIQ 15584,2675,2023.0,10.0,5.0,2023-10-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 13874,2676,2023.0,10.0,5.0,2023-10-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Ransomed.vc,Not available 15583,2677,2023.0,10.0,4.0,2023-10-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 13872,2678,2023.0,10.0,8.0,2023-10-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 13871,2679,2023.0,10.0,,2023-10,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 13804,2681,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13802,2682,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15431,2683,2023.0,9.0,,2023-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,India,Indian Cyber Force,Not available 15430,2683,2023.0,9.0,27.0,2023-9-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,India,Indian Cyber Force,Not available 15429,2684,2023.0,10.0,8.0,2023-10-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,AnonGh0st,Not available 18467,2686,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15427,2688,2023.0,10.0,10.0,2023-10-10,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 15426,2689,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15425,2690,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15424,2691,2023.0,10.0,11.0,2023-10-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Check Point 15423,2692,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15422,2697,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15421,2698,2023.0,10.0,12.0,2023-10-12,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 15420,2699,2023.0,10.0,9.0,2023-10-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Jordan,Not available,Not available 15419,2700,2023.0,8.0,31.0,2023-8-31,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,RansomedVC,Not available 15418,2701,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15417,2702,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15416,2703,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15415,2704,2023.0,10.0,14.0,2023-10-14,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Guatemala,Anonymous Guatemala,Not available 15414,2705,2023.0,10.0,15.0,2023-10-15,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,3musketeerz,Not available 15413,2706,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15412,2707,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15411,2708,2023.0,10.0,15.0,2023-10-15,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 15410,2709,2023.0,10.0,1.0,2023-10-1,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 15409,2710,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15404,2711,2023.0,10.0,17.0,2023-10-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Not available 15403,2713,2023.0,10.0,17.0,2023-10-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 15402,2714,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 13870,2715,2023.0,10.0,18.0,2023-10-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 13869,2716,2023.0,10.0,18.0,2023-10-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 13868,2717,2023.0,10.0,19.0,2023-10-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 15401,2719,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17886,2720,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15399,2721,2023.0,10.0,18.0,2023-10-18,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Cyber Resistance aka the Ukrainian Cyber Alliance,Not available 15398,2723,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15397,2724,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15395,2725,2023.0,10.0,19.0,2023-10-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,NLB,Not available 15395,2725,2023.0,10.0,19.0,2023-10-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,KibOrg,Not available 15396,2725,2023.0,10.0,23.0,2023-10-23,Attacker confirms,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Security Service of Ukraine (SBU),Not available 15391,2726,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15390,2729,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15389,2732,2023.0,10.0,24.0,2023-10-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 15388,2732,2023.0,10.0,24.0,2023-10-24,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States, GenDigital,GenDigital 15387,2733,2023.0,10.0,23.0,2023-10-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,IRoX Team,Not available 15386,2734,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15385,2735,2023.0,10.0,,2023-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Hassle Bros,Not available 15384,2737,2023.0,10.0,25.0,2023-10-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Cisco Talos 18143,2739,2023.0,12.0,25.0,2023-12-25,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 15382,2740,2023.0,10.0,27.0,2023-10-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,IT Army of Ukraine,Not available 15381,2741,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15380,2742,2023.0,10.0,,2023-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,SingularityMD,Not available 15377,2743,2023.0,10.0,27.0,2023-10-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Kaspersky,Kaspersky 15379,2744,2023.0,10.0,25.0,2023-10-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 15378,2745,2023.0,10.0,25.0,2023-10-25,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 15368,2746,,,,Not available,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,BHI energy,Not available 14387,2747,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14386,2748,2023.0,11.0,15.0,2023-11-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackBasta,Not available 16625,2749,,,,Not available,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Germany,Federal Ministry of the Interior and Community (Germany),Not available 14384,2750,2023.0,10.0,30.0,2023-10-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Security Joes,Security Joes 14383,2751,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14514,2752,2023.0,10.0,30.0,2023-10-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,UserSec,Not available 15273,2753,2023.0,10.0,31.0,2023-10-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Check Point 18274,2755,2023.0,11.0,20.0,2023-11-20,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 15271,2756,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15270,2757,2023.0,9.0,26.0,2023-9-26,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,MajorNelson,Not available 15270,2757,2023.0,9.0,26.0,2023-9-26,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,MajorNelson,Not available 15269,2757,2023.0,9.0,28.0,2023-9-28,Contested attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,RansomedVC,Not available 15269,2757,2023.0,9.0,28.0,2023-9-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,RansomedVC,Not available 15262,2759,2023.0,11.0,2.0,2023-11-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,LockBit,Not available 15061,2760,2023.0,11.0,3.0,2023-11-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,NoName057(16),Not available 14282,2761,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17125,2762,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15261,2763,2023.0,11.0,6.0,2023-11-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Palo Alto Networks Unit 42,Palo Alto Networks 15260,2764,2023.0,10.0,8.0,2023-10-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,ThreatSec,Not available 15259,2765,2023.0,11.0,6.0,2023-11-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat/ALPHV,Not available 15258,2766,2023.0,11.0,5.0,2023-11-5,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 15257,2767,2023.0,10.0,11.0,2023-10-11,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,depressed,Not available 15256,2768,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15253,2769,2023.0,11.0,1.0,2023-11-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Daixin Team,Not available 14273,2770,2023.0,11.0,7.0,2023-11-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Palo Alto Networks 15060,2771,2023.0,10.0,30.0,2023-10-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Cyber Resistance aka the Ukrainian Cyber Alliance,Not available 15060,2771,2023.0,10.0,30.0,2023-10-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,DumpForums,Not available 14271,2772,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17339,2773,2024.0,2.0,20.0,2024-2-20,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 15250,2774,2023.0,5.0,26.0,2023-5-26,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 15249,2775,2023.0,11.0,9.0,2023-11-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 15337,2776,2023.0,11.0,9.0,2023-11-9,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 15247,2778,2023.0,11.0,4.0,2023-11-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lorenz group,Not available 18935,2779,2023.0,11.0,6.0,2023-11-6,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Germany,Kaufhaus des Westens (KaDeWe),Not available 14222,2780,2023.0,10.0,4.0,2023-10-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat/ALPHV,Not available 14220,2781,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14218,2782,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14704,2783,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15055,2784,2023.0,11.0,9.0,2023-11-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,NoName057(16),Not available 14246,2786,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14225,2787,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14224,2788,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17297,2789,2023.0,11.0,9.0,2023-11-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 15245,2791,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15244,2792,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15221,2793,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17926,2795,2023.0,12.0,13.0,2023-12-13,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Lockbit,Not available 15214,2796,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14880,2797,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14879,2798,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14389,2801,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14388,2802,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15213,2803,2023.0,11.0,15.0,2023-11-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,INC Ransomware group,Not available 15212,2804,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15210,2805,2023.0,11.0,17.0,2023-11-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,Check Point Research,Not available 15209,2806,2023.0,11.0,17.0,2023-11-17,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Medusa Ransomware Group,Not available 15208,2808,2023.0,11.0,17.0,2023-11-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Palo Alto Networks Unit 42,Not available 15207,2809,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15206,2810,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15203,2811,2023.0,11.0,16.0,2023-11-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Not available 15202,2812,2023.0,11.0,16.0,2023-11-16,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Not available 15199,2813,2023.0,11.0,20.0,2023-11-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,SiegedSec,Not available 15198,2815,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15195,2816,2023.0,11.0,20.0,2023-11-20,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Cyber Resistance aka the Ukrainian Cyber Alliance,Not available 15194,2817,2023.0,11.0,21.0,2023-11-21,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Al-Toufan,Not available 15193,2818,2023.0,11.0,20.0,2023-11-20,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",ASEC,ASEC 15192,2819,2023.0,11.0,22.0,2023-11-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 15191,2821,2023.0,10.0,31.0,2023-10-31,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit 3.0,Not available 15190,2823,2023.0,11.0,23.0,2023-11-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,National Intelligence Service (NIS),Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",National Intelligence Service (NIS),Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",United Kingdom’s National Cyber Security Centre (NCSC),Not available 14870,2825,2023.0,10.0,13.0,2023-10-13,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",United Kingdom’s National Cyber Security Centre (NCSC),Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",National Intelligence Service (NIS),Not available 14871,2825,2023.0,11.0,23.0,2023-11-23,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,National Intelligence Service (NIS),Not available 18213,2826,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14839,2827,2023.0,11.0,23.0,2023-11-23,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Meow,Not available 14838,2828,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14837,2830,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14836,2831,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14835,2832,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14834,2833,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14833,2834,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15053,2835,2023.0,11.0,17.0,2023-11-17,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,NoName057(16),Not available 17370,2836,2024.0,2.0,2.0,2024-2-2,Attribution by receiver government / state entity,Domestic legal action,Sanctions,United States,Department of the Treasury’s Office of Foreign Assets Control (OFAC),Not available 17368,2836,2023.0,11.0,25.0,2023-11-25,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Cyber Avengers / Cyber Av3ngers,Not available 17369,2836,2023.0,12.0,1.0,2023-12-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 16052,2841,2023.0,11.0,23.0,2023-11-23,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Main Directorate of Intelligence of the Ministry of Defence of Ukraine,Not available 15183,2842,2023.0,11.0,24.0,2023-11-24,Media-based attribution,"Attribution given, type unclear",Not available,Netherlands,NRC newspaper,Not available 14832,2843,2023.0,11.0,28.0,2023-11-28,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Daixin Team,Not available 16064,2844,2024.0,1.0,7.0,2024-1-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 15161,2845,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15160,2850,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14831,2857,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 14830,2858,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15051,2859,2023.0,11.0,30.0,2023-11-30,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Cyber Avengers / Cyber Av3ngers,Not available 16865,2860,2023.0,12.0,18.0,2023-12-18,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Israel,Israel National Cyber Directorate,Not available 16864,2860,2024.0,1.0,27.0,2024-1-27,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,United Kingdom,Iran International,Not available 16863,2860,2023.0,11.0,,2023-11,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Not available,Not available 14827,2861,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15893,2864,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15892,2865,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15842,2866,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15891,2867,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15889,2868,2023.0,12.0,1.0,2023-12-1,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Fred Hutchinson Cancer Center,Not available 15890,2868,2023.0,11.0,15.0,2023-11-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 15826,2869,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15820,2870,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15888,2871,2023.0,11.0,30.0,2023-11-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackCat/ALPHV,Not available 15816,2873,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15810,2874,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15887,2877,2023.0,12.0,8.0,2023-12-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft Security Intelligence 15806,2878,2023.0,12.0,5.0,2023-12-5,Attribution by third-party,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Poland,Dragon Sector,Not available 15886,2879,2023.0,12.0,8.0,2023-12-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 15181,2881,2023.0,12.0,7.0,2023-12-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,PLAY,Not available 15884,2882,2023.0,11.0,30.0,2023-11-30,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,"Korea, Republic of",AhnLab,Not available 18047,2883,2023.0,12.0,22.0,2023-12-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 15883,2885,2023.0,12.0,6.0,2023-12-6,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 16251,2886,2023.0,12.0,5.0,2023-12-5,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 15804,2890,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15364,2892,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Not available 15305,2894,2023.0,12.0,5.0,2023-12-5,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Seoul Metropolitan Police Agency (SMPA),Not available 15305,2894,2023.0,12.0,5.0,2023-12-5,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 15305,2894,2023.0,12.0,5.0,2023-12-5,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",Seoul Metropolitan Police Agency (SMPA),Not available 15305,2894,2023.0,12.0,5.0,2023-12-5,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",Federal Bureau of Investigation (FBI),Not available 15803,2895,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15799,2896,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17257,2897,2023.0,12.0,13.0,2023-12-13,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,"Solntsepek < Sandworm/VOODOO Bear/Quedagh/TeleBots/FROZENBARENTS/IRON VIKING/Black Energy/Seashell Blizzard fka IRIDIUM/ELECTRUM/G0034 (GRU, Main Centre for Special Technologies (GTsST) Military Unit 74455)",Not available 15881,2898,2023.0,12.0,12.0,2023-12-12,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 15880,2899,2023.0,12.0,8.0,2023-12-8,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,IBM Security X-Force,Not available 18181,2900,2023.0,12.0,11.0,2023-12-11,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Eric Goldstein (CISA’s executive assistant director),Not available 18181,2900,2023.0,12.0,11.0,2023-12-11,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Eric Goldstein (CISA’s executive assistant director),Not available 18182,2900,2023.0,12.0,11.0,2023-12-11,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Jonathan Condra (Recorded Future),Not available 18182,2900,2023.0,12.0,11.0,2023-12-11,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Jonathan Condra (Recorded Future),Not available 18183,2900,2023.0,12.0,11.0,2023-12-11,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Morgan Adamski (Director of the National Security Agency’s Cybersecurity Collaboration Center),Not available 18183,2900,2023.0,12.0,11.0,2023-12-11,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Morgan Adamski (Director of the National Security Agency’s Cybersecurity Collaboration Center),Not available 18184,2900,2023.0,12.0,11.0,2023-12-11,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 15798,2901,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17063,2902,2024.0,2.0,6.0,2024-2-6,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft 15781,2925,2023.0,12.0,14.0,2023-12-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Singapore,Group-IB,Group-IB 15847,2926,2023.0,12.0,14.0,2023-12-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 15846,2927,2023.0,12.0,14.0,2023-12-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 15845,2928,2023.0,12.0,14.0,2023-12-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 15844,2929,2023.0,12.0,14.0,2023-12-14,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,National Security Agency (NSA),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,CERT Polska,Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Military Counterintelligence Service of Poland,Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Poland,CERT Polska,Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,National Security Agency (NSA),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,CERT Polska,Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Military Counterintelligence Service of Poland,Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Poland,Federal Bureau of Investigation (FBI),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Poland,Cybersecurity and Infrastructure Security Agency (CISA),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Poland,National Security Agency (NSA),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Poland,United Kingdom’s National Cyber Security Centre (NCSC),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Cybersecurity and Infrastructure Security Agency (CISA),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United Kingdom,Federal Bureau of Investigation (FBI),Not available 17422,2930,2023.0,12.0,13.0,2023-12-13,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Poland,Military Counterintelligence Service of Poland,Not available 15794,2931,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15795,2933,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15796,2935,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16544,2936,2023.0,12.0,18.0,2023-12-18,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Israel,"Gonjeshke Darande = Predatory Sparrow/Indra (Israeli Defence Forces, Unit 8200)",Not available 16545,2936,2023.0,12.0,,2023-12,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Israel,Not available,Not available 17238,2937,2023.0,12.0,19.0,2023-12-19,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,US Department of Justice (DoJ),Not available 15807,2938,2023.0,12.0,19.0,2023-12-19,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Symantec,Symantec 15809,2940,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15812,2944,2023.0,12.0,24.0,2023-12-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 15813,2945,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15814,2946,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15817,2948,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15818,2949,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15819,2953,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15821,2954,2023.0,12.0,24.0,2023-12-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Barracuda,Not available 15821,2954,2023.0,12.0,24.0,2023-12-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Not available 15824,2955,2023.0,12.0,25.0,2023-12-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Homeland Justice,Not available 15747,2956,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15746,2957,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15913,2958,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15741,2960,2023.0,12.0,,2023-12,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Russia,Lockbit 3.0,Not available 15834,2961,2023.0,12.0,28.0,2023-12-28,Attribution by receiver government / state entity,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Ukraine,CERT-UA,Not available 15835,2962,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17724,2967,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17723,2968,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17722,2970,2024.0,1.0,1.0,2024-1-1,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Australia,Robert Potter,Internet 2.0 17721,2972,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17720,2975,2024.0,1.0,2.0,2024-1-2,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Security Service of Ukraine (SBU),Not available 17719,2976,2023.0,1.0,3.0,2023-1-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Snow,Not available 17792,2978,2023.0,12.0,29.0,2023-12-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Cactus Ransomware Group,Not available 17717,2980,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17714,2981,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 15874,2982,2024.0,1.0,3.0,2024-1-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Uptycs,Not available 17016,2983,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16035,2984,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16036,2985,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16037,2986,2024.0,1.0,5.0,2024-1-5,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,Hunt & Hackett B.V.,Hunt & Hackett B.V. 16038,2987,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16269,2988,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16040,2989,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17639,2990,2024.0,1.0,3.0,2024-1-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackSuit,Not available 17638,2991,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17627,2992,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17625,2993,2024.0,2.0,16.0,2024-2-16,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,BlackCat/ALPHV,Not available 17624,2995,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17623,2996,2024.0,1.0,6.0,2024-1-6,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Israel,Cyvers,Cyvers 17622,2997,2023.0,12.0,27.0,2023-12-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,AlphV,Not available 17621,2998,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17620,3001,2023.0,12.0,29.0,2023-12-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,INC Ransomware group,Not available 17713,3002,2024.0,1.0,6.0,2024-1-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Black Hunt,Not available 17712,3003,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17711,3004,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17709,3007,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17708,3008,2024.0,1.0,10.0,2024-1-10,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,India,TeaM NETWORK9,Not available 17707,3010,2023.0,12.0,20.0,2023-12-20,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Ukraine,Not available,Not available 17706,3011,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17704,3013,2024.0,1.0,11.0,2024-1-11,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Medusa Ransomware Group,Not available 17703,3014,2024.0,1.0,11.0,2024-1-11,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SecurityScorecard`s STRIKE Team,Not available 17702,3018,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17701,3020,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17700,3021,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17699,3022,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17619,3026,2024.0,1.0,17.0,2024-1-17,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Switzerland,NoName057(16),Not available 17618,3027,2024.0,1.0,,2024-1,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Lockbit,Not available 17617,3028,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17616,3029,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17873,3030,2024.0,1.0,31.0,2024-1-31,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 17874,3030,2024.0,1.0,15.0,2024-1-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Volexity,Volexity 17875,3030,2024.0,2.0,27.0,2024-2-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 17872,3030,,,,Not available,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Volexity,Volexity 17612,3032,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17609,3033,2024.0,1.0,17.0,2024-1-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft Security Intelligence 17608,3034,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17602,3035,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18510,3036,2024.0,1.0,19.0,2024-1-19,Receiver attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Not available 17596,3037,2024.0,1.0,21.0,2024-1-21,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Bleeping Computer,Not available 17597,3037,2024.0,1.0,22.0,2024-1-22,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Finland,Tietoevry,Not available 17512,3038,2024.0,1.0,23.0,2024-1-23,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 17511,3039,2024.0,1.0,18.0,2024-1-18,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Qilin Ransomware Group,Not available 17927,3040,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17598,3043,2024.0,1.0,19.0,2024-1-19,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 17505,3044,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17503,3045,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17502,3046,2024.0,1.0,,2024-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,ROOTK1T,Not available 17494,3047,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17489,3050,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17488,3051,2024.0,1.0,22.0,2024-1-22,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,IT Army of Ukraine,Not available 17487,3051,2024.0,1.0,23.0,2024-1-23,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Main Directorate of Intelligence of the Ministry of Defence of Ukraine,Not available 16733,3052,2024.0,1.0,23.0,2024-1-23,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Germany,Reporter sans frontieres,Not available 16723,3053,2024.0,1.0,23.0,2024-1-23,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Turkey,MeshSec,Not available 16724,3054,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17980,3055,2024.0,1.0,19.0,2024-1-19,Not available,"Political statement / report (e.g., on government / state agency websites)",Not available,Not available,Not available,Not available 17889,3056,2024.0,1.0,24.0,2024-1-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 16727,3057,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18814,3058,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17485,3070,2024.0,1.0,24.0,2024-1-24,Attribution by third-party,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Main Intelligence Department of the Ministry of Defense of Ukraine (GURMO) ,Not available 17484,3073,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17448,3074,2024.0,1.0,,2024-1,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Medusa Ransomware Group,Not available 17447,3075,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17446,3076,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Black Basta Ransomware Gang,Not available 17445,3077,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17765,3078,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17441,3079,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17440,3080,2024.0,1.0,29.0,2024-1-29,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 17439,3081,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17373,3082,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17372,3083,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17220,3084,2024.0,1.0,29.0,2024-1-29,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Mexico,"Andres Manuel Lopez Obrador (President of Mexico, Mexico)",Not available 17731,3085,2024.0,2.0,13.0,2024-2-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 17371,3087,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17140,3088,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17139,3089,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17138,3090,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17137,3091,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18385,3092,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 16757,3093,2024.0,1.0,30.0,2024-1-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,LockBit,Not available 16943,3094,2024.0,2.0,1.0,2024-2-1,Receiver attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Matthew Prince (Co-founder & CEO of Cloudflare) et al. ,Not available 16945,3095,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16946,3096,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17030,3097,2024.0,2.0,1.0,2024-2-1,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,"Iran, Islamic Republic of",Not available,Not available 17030,3097,2024.0,2.0,1.0,2024-2-1,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,"Iran, Islamic Republic of",Not available,Not available 18366,3098,2024.0,2.0,27.0,2024-2-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Rhysida Ransomware Group,Not available 18367,3099,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17329,3101,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18370,3102,2024.0,2.0,15.0,2024-2-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 16951,3103,2024.0,2.0,2.0,2024-2-2,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 18362,3104,2024.0,2.0,2.0,2024-2-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Medusa Ransomware Group,Not available 16953,3105,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18360,3106,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16876,3107,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16888,3108,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16890,3111,2020.0,,,2020,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Not available,Not available 16891,3111,2020.0,,,2020,Attribution by third-party,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Not available,Not available 16880,3112,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16889,3113,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16887,3114,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 16886,3115,2024.0,1.0,25.0,2024-1-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 16914,3119,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18384,3124,2024.0,2.0,6.0,2024-2-6,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Netherlands,Dutch General Intelligence and Security Service (AIVD),Not available 18384,3124,2024.0,2.0,6.0,2024-2-6,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Netherlands,Dutch Military Intelligence and Security Service (MIVD),Not available 18267,3125,2024.0,1.0,25.0,2024-1-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Qilin Ransomware Group,Not available 18266,3126,2024.0,2.0,5.0,2024-2-5,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Spain,Foundation for the Development of Nursing (FUDEN),Not available 18199,3127,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18198,3128,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Trigona Ransomware Group,Not available 18197,3129,2024.0,2.0,3.0,2024-2-3,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Iceland,Reykjavík University,Not available 18196,3130,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18192,3131,2024.0,2.0,7.0,2024-2-7,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Spain,National Cryptologic Center,Not available 18193,3131,2024.0,2.0,6.0,2024-2-6,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 18194,3131,2024.0,2.0,7.0,2024-2-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 18191,3132,2024.0,2.0,6.0,2024-2-6,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Sweden,"Nico Werge (Communication Manager of Kalmar Municipality, Sweden)",Not available 18190,3133,2024.0,2.0,7.0,2024-2-7,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Ministry of Education and Science (Ukraine),Not available 18189,3134,2024.0,2.0,7.0,2024-2-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Turk Hack Team,Not available 18188,3136,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18187,3137,2024.0,1.0,31.0,2024-1-31,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,US Department of Justice (DoJ),Not available 18172,3138,2024.0,1.0,,2024-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Black Basta Ransomware Gang,Not available 18171,3139,2024.0,2.0,8.0,2024-2-8,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Main Directorate of Intelligence of the Ministry of Defence of Ukraine,Not available 18162,3140,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18161,3141,2024.0,2.0,6.0,2024-2-6,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 18160,3142,2024.0,2.0,21.0,2024-2-21,Media-based attribution,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Austria,Austrian Direktion Staatsschutz und Nachrichtendienst (DSN),Not available 18159,3143,2024.0,2.0,8.0,2024-2-8,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymouss224,Not available 18134,3145,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18133,3146,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18132,3147,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18130,3148,2024.0,2.0,6.0,2024-2-6,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,People’s Cyber Army of Russia,Not available 18361,3150,2024.0,2.0,9.0,2024-2-9,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Blackout,Not available 18127,3151,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18122,3152,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18119,3153,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18117,3154,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18010,3155,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18007,3156,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18423,3157,2024.0,2.0,16.0,2024-2-16,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,BlackCat/ALPHV,Not available 18005,3158,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18004,3160,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18356,3162,2024.0,2.0,15.0,2024-2-15,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,US Department of Justice (DoJ),Not available 18358,3163,2024.0,2.0,13.0,2024-2-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,GhyamSarnegouni = Uprising till Overthrow,Not available 18357,3164,2024.0,2.0,14.0,2024-2-14,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Korea, Republic of",The Office of the President of the Republic of Korea,Not available 18355,3165,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 18355,3165,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Google Threat Analysis Group 18355,3165,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Mandiant 18355,3165,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Google Threat Analysis Group 18354,3166,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Cisco Talos 18353,3167,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 18353,3167,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Google Threat Analysis Group 18353,3167,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Mandiant 18353,3167,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Google Threat Analysis Group 18352,3168,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Google Threat Analysis Group 18352,3168,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Google Threat Analysis Group 18352,3168,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 18352,3168,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Mandiant 18351,3169,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Google Threat Analysis Group 18351,3169,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Google Threat Analysis Group 18351,3169,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 18351,3169,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Mandiant 18350,3170,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 18350,3170,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Mandiant 18350,3170,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Google's TAG,Google Threat Analysis Group 18350,3170,2024.0,2.0,15.0,2024-2-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Google Threat Analysis Group 18349,3171,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18348,3172,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18347,3175,2024.0,2.0,17.0,2024-2-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Recorded Future,Not available 18345,3176,2024.0,2.0,16.0,2024-2-16,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Washington County Officials,Not available 18344,3177,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18002,3180,2024.0,2.0,19.0,2024-2-19,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 18343,3181,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 18342,3183,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Edaalate Ali,Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,National Crime Agency (NCA),Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,United Kingdom’s National Cyber Security Centre (NCSC),Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,Federal Bureau of Investigation (FBI),Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United Kingdom,US Department of Justice (DoJ),Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,US Department of Justice (DoJ),Not available 18001,3184,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,National Crime Agency (NCA),Not available 18341,3185,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18340,3186,2024.0,2.0,20.0,2024-2-20,Attribution by third-party,Domestic legal action,Indictment,United States,United States District Court District of New Jersey,Not available 18338,3187,2024.0,2.0,20.0,2024-2-20,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,United States District Court District of New Jersey,Not available 18339,3188,2024.0,2.0,20.0,2024-2-20,Attribution by third-party,Domestic legal action,Indictment,United States,United States District Court District of New Jersey,Not available 18336,3189,2024.0,2.0,16.0,2024-2-16,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,China,Ministry of State Security (MSS; China),Not available 17968,3190,2024.0,2.0,20.0,2024-2-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,MUTARRIF,Not available 18335,3191,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18334,3192,2024.0,2.0,18.0,2024-2-18,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,SSSCIP,Not available 18333,3193,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18332,3194,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17967,3195,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19048,3196,2024.0,2.0,26.0,2024-2-26,IT-security community attributes attacker,"Anonymous statement in media report (e.g., Reuters article cites the attribution statements of unnamed officials, or persons with knowledge into the matter etc.)",Not available,Not available,Not available,Not available 19047,3196,2024.0,2.0,21.0,2024-2-21,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Change Healthcare,Not available 18318,3198,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18317,3199,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17986,3200,2024.0,2.0,24.0,2024-2-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,NoName057(16),Not available 18316,3202,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18315,3203,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18314,3205,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18313,3206,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18312,3207,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18311,3208,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18310,3209,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18309,3210,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18386,3211,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17996,3212,2024.0,2.0,13.0,2024-2-13,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,LockBit,Not available 17997,3213,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18000,3214,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 17999,3215,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18020,3216,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18021,3217,2024.0,2.0,27.0,2024-2-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Pakistan,Team Insane PK,Not available 18023,3218,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18308,3219,2024.0,2.0,27.0,2024-2-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 18307,3220,2024.0,2.0,24.0,2024-2-24,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 18306,3221,2024.0,2.0,19.0,2024-2-19,Attribution by receiver government / state entity,Domestic legal action,Arrests,Spain,Not available,Not available 18928,3223,2024.0,2.0,29.0,2024-2-29,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Philippines,"Armando Balilo (Rear Admiral and Spokesperson of Philippine Coast Guard, Philippines)",Not available 18925,3225,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18924,3226,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18921,3227,2024.0,2.0,28.0,2024-2-28,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Czech Republic,Jan Vojtěšek,Avast 18920,3228,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18919,3229,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18918,3230,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18917,3231,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18916,3232,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19005,3233,2024.0,3.0,4.0,2024-3-4,Attacker confirms,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,Main Directorate of Intelligence of the Ministry of Defence of Ukraine,Not available 19013,3234,2024.0,3.0,4.0,2024-3-4,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Kroll,Kroll 19007,3235,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19010,3237,2024.0,3.0,4.0,2024-3-4,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",National Intelligence Service (South Korea),Not available 19003,3238,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19014,3240,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19006,3242,2024.0,,,2024,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 18914,3243,2024.0,2.0,29.0,2024-2-29,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 18915,3243,2024.0,4.0,23.0,2024-4-23,Attribution by receiver government / state entity,Domestic legal action,Indictment,United States,US Department of Justice (DoJ),Not available 18913,3244,2024.0,3.0,4.0,2024-3-4,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Korea, Republic of",Korean National Police Agency (KNPA),Not available 18913,3244,2024.0,3.0,4.0,2024-3-4,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Korea, Republic of",National Intelligence Service (South Korea),Not available 18912,3245,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18911,3246,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18910,3247,2024.0,3.0,5.0,2024-3-5,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 18909,3248,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19009,3250,2023.0,11.0,30.0,2023-11-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,"Iran, Islamic Republic of",Lord Nemesis,Not available 19008,3250,2024.0,3.0,7.0,2024-3-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Israel,OP Innovate,OP Innovate 19004,3251,2024.0,3.0,7.0,2024-3-7,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Slovakia,ESET,ESET 19002,3252,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18908,3253,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18907,3254,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18906,3255,2024.0,3.0,7.0,2024-3-7,Attacker confirms,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Emo,Not available 18888,3256,2024.0,3.0,7.0,2024-3-7,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 18725,3258,2024.0,3.0,11.0,2024-3-11,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Anonymous Sudan (Storm-1359) < Killnet,Not available 18724,3259,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18723,3260,2023.0,10.0,27.0,2023-10-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Akira Ransomware Group,Not available 18722,3261,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18721,3262,2024.0,3.0,,2024-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 18717,3263,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19015,3264,2024.0,3.0,12.0,2024-3-12,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Ph1ns,Not available 18850,3265,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18614,3266,2024.0,3.0,12.0,2024-3-12,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Anonymous Sudan (Storm-1359) < Killnet,Not available 18449,3267,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18448,3268,2024.0,3.0,7.0,2024-3-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Ik4ru T3nso,Not available 18447,3269,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18741,3270,2021.0,8.0,,2021-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,ShinyHunters,Not available 18445,3271,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18444,3272,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18421,3273,2024.0,3.0,27.0,2024-3-27,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,INC Ransomware group,Not available 18420,3274,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18399,3275,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18381,3276,2024.0,3.0,18.0,2024-3-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Trend Micro,Trend Micro 18380,3277,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18379,3278,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18378,3279,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18375,3280,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18304,3281,2024.0,3.0,,2024-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 18303,3282,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19001,3283,2024.0,3.0,21.0,2024-3-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Mandiant,Mandiant 18302,3284,2024.0,3.0,21.0,2024-3-21,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,NoName057(16),Not available 18301,3285,2024.0,2.0,,2024-2,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,LockBit,Not available 18298,3286,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18297,3287,2024.0,3.0,20.0,2024-3-20,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 18998,3288,2024.0,3.0,21.0,2024-3-21,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,SentinelOne,Not available 18999,3288,2024.0,3.0,13.0,2024-3-13,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Russia,"Solntsepek < Sandworm/VOODOO Bear/Quedagh/TeleBots/FROZENBARENTS/IRON VIKING/Black Energy/Seashell Blizzard fka IRIDIUM/ELECTRUM/G0034 (GRU, Main Centre for Special Technologies (GTsST) Military Unit 74455)",Not available 18296,3289,2024.0,3.0,21.0,2024-3-21,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 18292,3290,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18293,3291,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18294,3292,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Lockbit,Not available 18295,3293,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18299,3294,2024.0,3.0,26.0,2024-3-26,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,New Zealand,Governments Communications Security Bureau (New Zealand),Not available 18300,3295,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18321,3296,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18397,3298,2024.0,3.0,27.0,2024-3-27,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Netherlands,EclecticIQ,EclecticIQ 18393,3299,2024.0,3.0,27.0,2024-3-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,NoName057(16),Not available 18396,3300,2024.0,3.0,,2024-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 18436,3301,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18437,3302,2024.0,4.0,1.0,2024-4-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Not available,Not available 18437,3302,2024.0,4.0,1.0,2024-4-1,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Not available,Not available 18450,3304,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,Lockbit,Not available 18439,3305,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18440,3306,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18622,3308,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18742,3309,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18625,3310,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18613,3314,2024.0,3.0,30.0,2024-3-30,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,SEXi,Not available 18873,3315,2024.0,4.0,3.0,2024-4-3,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,INC Ransomware group,Not available 18611,3316,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18610,3317,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18609,3318,2024.0,4.0,3.0,2024-4-3,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Resecurity,Not available 18608,3320,2024.0,3.0,29.0,2024-3-29,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 18606,3321,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18605,3322,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18626,3324,2024.0,4.0,3.0,2024-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,One Fist,Not available 18626,3324,2024.0,4.0,3.0,2024-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,One Fist,Not available 18626,3324,2024.0,4.0,3.0,2024-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United Kingdom,"Kristopher Kortright aka Voltage (IT worker, United States) < One Fist",Not available 18626,3324,2024.0,4.0,3.0,2024-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Poland,One Fist,Not available 18626,3324,2024.0,4.0,3.0,2024-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Poland,"Kristopher Kortright aka Voltage (IT worker, United States) < One Fist",Not available 18626,3324,2024.0,4.0,3.0,2024-4-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,"Kristopher Kortright aka Voltage (IT worker, United States) < One Fist",Not available 18785,3326,2024.0,4.0,3.0,2024-4-3,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Palau,"Surangel Samuel Whipps Jr. (President, Palau)",Not available 18784,3326,2024.0,4.0,4.0,2024-4-4,Attribution by receiver government / state entity,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Palau,Jay Hunter Anson (CISO of Palau's Ministry of Finance),Not available 18783,3326,2024.0,3.0,14.0,2024-3-14,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,DragonForce,Not available 18782,3326,2024.0,3.0,14.0,2024-3-14,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Lockbit,Not available 18627,3336,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18872,3339,2024.0,4.0,12.0,2024-4-12,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Hunters International,Not available 18629,3340,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18643,3341,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18638,3342,2024.0,4.0,5.0,2024-4-5,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Anonymous for Justice,Not available 18642,3343,2024.0,4.0,7.0,2024-4-7,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Turkey,Bozkurtlar (a.k.a. Grey Wolves),Not available 18641,3344,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18640,3345,2024.0,3.0,31.0,2024-3-31,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,IntelBroker,Not available 18640,3345,2024.0,3.0,31.0,2024-3-31,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Sanggiero,Not available 18644,3346,2024.0,4.0,4.0,2024-4-4,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Positive Technologies,Positive Technologies 18645,3348,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18646,3349,2024.0,3.0,,2024-3,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackSuit,Not available 18647,3352,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18648,3353,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18649,3354,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19017,3355,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18651,3356,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18670,3357,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18786,3358,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18787,3359,2024.0,4.0,,2024-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 18715,3360,2024.0,4.0,10.0,2024-4-10,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Dark Angel Ransomware Group,Not available 18730,3361,2024.0,4.0,12.0,2024-4-12,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Volexity,Not available 18694,3362,2023.0,8.0,,2023-8,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Rhysida Ransomware Group,Not available 18696,3366,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18709,3368,2024.0,4.0,,2024-4,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Ukraine,Blackjack (SBU),Not available 18703,3369,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18788,3371,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18789,3372,2024.0,4.0,,2024-4,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 18790,3373,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18794,3374,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18792,3375,2024.0,4.0,15.0,2024-4-15,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Russia,Positive Technologies,Positive Technologies 18793,3375,2023.0,8.0,10.0,2023-8-10,IT-security community attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Ankit Anubhav,Not available 18796,3376,,,,Not available,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Medusa Ransomware Group,Not available 18795,3376,2024.0,4.0,12.0,2024-4-12,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 18797,3377,2024.0,4.0,15.0,2024-4-15,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Cyber Resistance aka the Ukrainian Cyber Alliance,Not available 18798,3378,2024.0,4.0,17.0,2024-4-17,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,BlackBerry Research and Intelligence Team,BlackBerry Research and Intelligence Team 18799,3380,2024.0,4.0,12.0,2024-4-12,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Volexity,Volexity 18800,3382,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18801,3383,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Not available,Not available 18940,3384,2024.0,4.0,15.0,2024-4-15,Receiver attributes attacker,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Frontier Communications,Not available 18941,3385,2024.0,4.0,17.0,2024-4-17,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Belarus,Belarusian Cyber Partisans,Not available 18942,3386,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18846,3387,2024.0,4.0,19.0,2024-4-19,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,MITRE Corporation,Not available 18845,3388,2024.0,4.0,20.0,2024-4-20,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,ZDF,Not available 18845,3388,2024.0,4.0,20.0,2024-4-20,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Der Spiegel,Not available 18843,3390,2024.0,4.0,13.0,2024-4-13,Attacker confirms,"Self-attribution in the course of the attack (e.g., via defacement statements on websites)",Not available,Not available,Not available,Not available 18840,3391,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18848,3393,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18856,3394,2024.0,4.0,22.0,2024-4-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Microsoft,Microsoft Security Intelligence 18858,3395,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18860,3396,2024.0,4.0,19.0,2024-4-19,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,Ukraine,CERT-UA,Not available 18862,3397,2024.0,4.0,22.0,2024-4-22,Receiver attributes attacker,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Taiwan,Chicony Electronics,Not available 18864,3398,2024.0,4.0,21.0,2024-4-21,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,MexicanMafia,Not available 18866,3399,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18890,3400,2024.0,4.0,23.0,2024-4-23,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",Korean National Police Agency (KNPA),Not available 18892,3401,2024.0,4.0,23.0,2024-4-23,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",Korean National Police Agency (KNPA),Not available 18896,3402,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18894,3403,2024.0,4.0,23.0,2024-4-23,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,"Korea, Republic of",Korean National Police Agency (KNPA),Not available 18898,3404,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18901,3406,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18903,3410,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18930,3411,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18929,3412,2024.0,4.0,22.0,2024-4-22,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,France,HarfangLab,Not available 18937,3413,2024.0,2.0,24.0,2024-2-24,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,United States,Cisco Talos Intelligence,Cisco Talos Intelligence 18939,3414,2024.0,4.0,23.0,2024-4-23,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,BlackSuit,Not available 18945,3415,2024.0,4.0,20.0,2024-4-20,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,People’s Cyber Army of Russia,Not available 18946,3415,2024.0,4.0,25.0,2024-4-25,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Russia,People’s Cyber Army of Russia,Not available 18948,3416,2024.0,4.0,18.0,2024-4-18,IT-security community attributes attacker,"Technical report (e.g., by IT-companies, Citizen Lab, EFF)",Not available,Czech Republic,Avast,Avast 18952,3417,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18992,3418,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18977,3419,2024.0,4.0,24.0,2024-4-24,Media-based attribution,"Media report (e.g., Reuters makes an attribution statement, without naming further sources)",Not available,Not available,Not available,Not available 18980,3420,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18989,3421,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18986,3422,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 18983,3423,2024.0,3.0,,2024-3,Media-based attribution,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,United States,Federal Bureau of Investigation (FBI),Not available 18996,3424,2024.0,4.0,26.0,2024-4-26,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Belarus,Belarusian Cyber Partisans,Not available 18997,3425,2024.0,4.0,27.0,2024-4-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,BO Team,Not available 18997,3425,2024.0,4.0,27.0,2024-4-27,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Ukraine,Ukraine´s Defense Intelligence (HUR),Not available 19021,3426,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19024,3427,2024.0,4.0,24.0,2024-4-24,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,Medusa Ransomware Group,Not available 19026,3428,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19028,3429,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19030,3430,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19050,3431,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Federal Bureau of Investigation (FBI),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,National Security Agency (NSA),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Canadian Centre for Cyber Security (CCCS),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,United Kingdom’s National Cyber Security Centre (NCSC),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Environmental Protection Agency (EPA),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,United States Department of Energy (DOE),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,United States Department of Agriculture (USDA),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Food and Drug Administration (FDA),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Multi-State Information Sharing and Analysis Center (MS-ISAC),Not available 19052,3432,2024.0,5.0,1.0,2024-5-1,Attribution by receiver government / state entity,"Political statement / report (e.g., on government / state agency websites)",Not available,United States,Cybersecurity and Infrastructure Security Agency (CISA),Not available 19054,3433,,,,Not available,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,China,Not available,Not available 19057,3435,,,,Not available,Not available,Not available,Not available,Not available,Not available,Not available 19059,3436,2024.0,4.0,30.0,2024-4-30,Attacker confirms,"Direct statement in media report (e.g., Reuters article cites the attribution statements by a person) / self-attribution via social media",Not available,Not available,EMBARGO,Not available