Threat Library

Countries. Who Is Targeted Where.

How each country is targeted: the sectors attackers go after, the groups active there and the national bodies to know.

Region

Country. Asia Pacific.

Australia.

Australia faces state-linked espionage, ransomware and large-scale customer data theft.

Country Profile.

Country. Europe.

Azerbaijan.

Azerbaijan faces espionage by state-linked groups, hacktivist defacements, DDoS attacks on telecoms and widespread online fraud against citizens.

Country Profile.

Country. Latin America.

Brazil.

Brazil faces banking trojans and fraud, ransomware against health services and other organizations, and state-linked campaigns.

Country Profile.

Country. North America.

Canada.

Canada faces state espionage, ransomware against hospitals, governments and critical infrastructure, and pro-Russia denial of service campaigns.

Country Profile.

Country. Middle East.

Egypt.

Egypt's cyber risk is shown by surveillance of political figures, regional espionage, fraud and large personal data sales.

Country Profile.

Country. Europe.

France.

France faces espionage by state-linked groups, data theft and ransomware, and attacks around big events such as the Paris 2024 Games.

Country Profile.

Country. Europe.

Germany.

Germany faces cyber espionage by state actors, ransomware against companies and local governments, and DDoS campaigns against critical infrastructure.

Country Profile.

Country. Asia Pacific.

India.

India is one of the world's largest digital economies, and its government reports millions of cyber incidents a year, with over 29.44 lakh handled by CERT-In in 2025.

Country Profile.

Country. Asia Pacific.

Indonesia.

Indonesia is a large digital economy where cyber risk is shaped by ransomware, data leaks and fraud against banks and public bodies.

Country Profile.

Country. Europe.

Ireland.

Ireland is a European country whose national cyber center (NCSC) leads the response to major cyber incidents.

Country Profile.

Country. Middle East.

Israel.

Israel is a small, highly connected country that faces frequent cyber activity linked to the region's conflicts.

Country Profile.

Country. Europe.

Italy.

Italy faces ransomware, DDoS campaigns by pro-Russian groups and data exposure.

Country Profile.

Country. Asia Pacific.

Japan.

Japan faces cyber espionage linked by its police to China and North Korea, ransomware against manufacturers and smaller firms, and theft of crypto assets.

Country Profile.

Country. Asia Pacific.

Kazakhstan.

Kazakhstan faces fast-growing cybercrime, mostly theft of personal data, and DDoS waves against its national internet and state sites.

Country Profile.

Country. Latin America.

Mexico.

Mexico faces attacks on banks and payment systems, attacks on state bodies and companies, and banking fraud.

Country Profile.

Country. Europe.

Netherlands.

The Netherlands faces cyber espionage by Russian and Chinese state actors, ransomware, DDoS attacks and data leaks through suppliers.

Country Profile.

Country. Africa.

Nigeria.

Nigeria is one of Africa's largest digital economies, and its own cyber agency says government websites have been defaced and hit by ransomware.

Country Profile.

Country. Asia Pacific.

Pakistan.

Pakistan appears in MITRE ATT&CK and US government texts as a target of South Asian and Chinese espionage groups and as one of the nations a North Korean bank-robbing team likely targeted.

Country Profile.

Country. Europe.

Poland.

Poland faces cyber threats from state-linked actors such as APT28, Sandworm and Dragonfly, and from ransomware families such as LockBit.

Country Profile.

Country. Middle East.

Qatar.

Qatar is a small, wealthy Gulf state with a national cyber agency that runs yearly drills and sets security standards.

Country Profile.

Country. Europe.

Romania.

Romania is targeted by Russian state-linked actors and hacktivists, according to official sources.

Country Profile.

Country. Middle East.

Saudi Arabia.

Saudi Arabia is a Gulf state.

Country Profile.

Country. Asia Pacific.

Singapore.

Singapore faces state-linked espionage against its critical infrastructure, ransomware against businesses and a large volume of botnet infections.

Country Profile.

Country. Africa.

South Africa.

South Africa has seen ransomware against national departments and state companies, and large leaks of personal data.

Country Profile.

Country. Asia Pacific.

South Korea.

South Korea faces cyber espionage and destructive attacks linked by official sources to North Korean state groups, and large data breaches at telecom and retail firms.

Country Profile.

Country. Europe.

Spain.

Spain faces fraud, malware and ransomware, and its public bodies have been hit directly.

Country Profile.

Country. Asia Pacific.

Taiwan.

Taiwan faces constant cyber pressure that its National Security Bureau ties to China: 2.63 million intrusion attempts a day against critical infrastructure in 2025, by the Bureau's count.

Country Profile.

Country. Europe.

Türkiye.

Türkiye faces cyber threats from state-linked groups and criminals.

Country Profile.

Country. Europe.

Ukraine.

Ukraine is the country where Russian state cyber operations have been most destructive, from the 2015 power grid attack to wiper malware in 2022.

Country Profile.

Country. Middle East.

United Arab Emirates.

The United Arab Emirates is a Gulf state with a national Cyber Security Council and separate bodies in Dubai and Abu Dhabi.

Country Profile.

Country. Europe.

United Kingdom.

The United Kingdom faces cyber threats from states and from ransomware crews.

Country Profile.

Country. North America.

United States.

This page collects what matters for cyber threats in the United States: the sectors attackers go after, the threat groups that US government sources link to the country, the major national incidents, and the bodies and rules to know.

Country Profile.

Brandefense

Stay Ahead Of Digital Threats.

Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.

Request a demo