Ghost-Watch Threat Map
Real-time threat actor geographic distribution and attack vector visualization | Shadow313 NEXUS
Active Threat Actors
Live Feed
47
Active APT Groups
312
IOCs Tracked
8
Active Campaigns
Top Threat Actors
ATT&CK Mapped
APT29 (Cozy Bear / SVR)
Nation-state: Russia | TTPs: T1195.002, T1078, T1550.003, T1573.002 | Active campaigns: 3 | Last seen: 2026-10-15
APT41 (Winnti / MSS)
Nation-state: China | TTPs: T1190, T1059.006, T1055.001, T1048 | Active campaigns: 2 | Last seen: 2026-10-14
Lazarus Group (DPRK)
Nation-state: North Korea | TTPs: T1566.001, T1071.004, T1486, T1083 | Active campaigns: 2 | Last seen: 2026-10-13
FIN7 (Carbanak)
Cybercriminal | TTPs: T1566.001, T1204.002, T1059.001, T1003.001 | Active campaigns: 1 | Last seen: 2026-10-12
Attack Vector Distribution
Last 30 Days
Spearphishing
68%
Supply Chain
22%
Exploit Public App
10%