Top 10 APT Groups in 2025

This report profiles the top APT actors active in 2025—China-, Russia-, Iran-, North Korea-, and Pakistan-aligned groups—summarizing their observed campaigns, targeted sectors (governments, critical infrastructure, maritime, energy, telecoms), notable incidents (Upbit cryptocurrency heist, Sandworm destructive wipers, watering-hole campaign disrupted by Amazon), and commonly used TTPs such as fileless techniques, signed component abuse, web shells, credential theft, and phishing.