Norway — country threat file

Threat actors targeting Norway

17 on record

APT1APT

CN · China· active since 2006

PLA Unit 61398 cyber-espionage group; subject of the 2013 Mandiant APT1 report.

ESP

APT18APT

CN · China· active since 2009

ESP

APT29APT

RU · Russia· active since 2008

Russian SVR cyber-espionage group; perpetrators of the SolarWinds supply-chain compromise.

ESP

APT36APT

PK · Pakistan· active since 2013

ESP

APT40APT

CN · China· active since 2013

ESP

APT42APT

IR · Iran· active since 2015

ESP

APT43APT

KP · North Korea· active since 2012

ESP

APT44APT

RU · Russia· active since 2009

GRU Unit 74455 destructive-attack and disinformation group.

DISESP

APT45APT

KP · North Korea· active since 2009

ESPRAN

APT5APT

CN · China· active since 2007

ESP

Donot TeamAPT

IN · India· active since 2016

ESP

FIN7CRIME

RU · Russia· active since 2013

FINRAN

PatchworkAPT

IN · India· active since 2009

ESP

Pioneer KittenAPT

IR · Iran· active since 2017

IRGC-affiliated cluster involved in espionage and access brokering.

BY · Belarus· active since 2016

Belarusian disinformation and credential-theft cluster aligned with Russian objectives.

ESPDIS

Tradecraft observed

5 threat-type families

Espionage16

Ransomware2

Disinformation2

Financial Fraud1

Extortion1

ATTACKER ORIGIN MIX

CNChina4

RURussia4

KPNorth Korea3

IRIran2

INIndia2

PKPakistan1

BYBelarus1

Sectors under attack in Norway

33 sectors

Neighbours in Europe

52 countries · by targeting activity