IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure

Global Threat Infrastructure

Nation-state C2 activity · Real-time IOC geo-distribution

15,253High-conf IPs
60Countries
40Attack paths
24,861Actor IOCs
23,598Persistent IPs
23APT Groups
Actors
Russia
China
North Korea
Iran
C2 Density
Critical
High
Medium
Low
Scroll to zoom · Drag to pan
Nation-State ActorsIOC · groups · routes
🇷🇺Russia13,174
8 APT groups17 attack routes
Top targets
→🇺🇸United States1134
→🇨🇳China811
→🇭🇰Hong Kong482
TurlaSandwormGamaredonAPT28+2
🇰🇵North Korea9,805
4 APT groups16 attack routes
Top targets
→🇺🇸United States941
→🇨🇳China701
→🇭🇰Hong Kong344
KimsukyLazarus GroupAPT37APT38
🇨🇳China1,648
6 APT groups6 attack routes
Top targets
→🇺🇸United States246
→🇭🇰Hong Kong78
→🇩🇪Germany73
APT10Salt TyphoonVolt TyphoonAPT3+2
🇮🇷Iran184
3 APT groups0 attack routes
Top targets
MuddyWaterAPT34APT35
🇺🇦UA50
1 APT groups1 attack routes
Top targets
→🇭🇰Hong Kong39
FIN7
🇸🇩SD0
1 APT groups0 attack routes
Top targets
Anonymous Sudan
Attack Routesorigin → C2 infra
🇷🇺RU→🇺🇸United States1134
🇰🇵KP→🇺🇸United States941
🇷🇺RU→🇨🇳China811
🇰🇵KP→🇨🇳China701
🇷🇺RU→🇭🇰Hong Kong482
🇰🇵KP→🇭🇰Hong Kong344
🇷🇺RU→🇩🇪Germany325
🇰🇵KP→🇩🇪Germany323
🇷🇺RU→🇳🇱The Netherlands317
🇰🇵KP→🇳🇱The Netherlands302
🇨🇳CN→🇺🇸United States246
🇷🇺RU→🇸🇬Singapore187
🇷🇺RU→🇫🇷France150
🇰🇵KP→🇸🇬Singapore147
🇰🇵KP→🇫🇷France146
🇷🇺RU→🇬🇧United Kingdom104
🇷🇺RU→🇯🇵Japan101
🇷🇺RU→🇨🇦Canada89
🇰🇵KP→🇷🇺Russia81
🇰🇵KP→🇯🇵Japan79
Shared Infrastructuremulti-actor C2
🇺🇸
United States
RUKPCN
2321
🇨🇳
China
RUKP
1512
🇭🇰
Hong Kong
RUKPCNUA
943
🇳🇱
The Netherlands
RUKPCN
789
🇩🇪
Germany
RUKPCN
721
🇸🇬
Singapore
RUKPCN
375
🇫🇷
France
RUKPCN
329
🇯🇵
Japan
RUKP
180