Skip to content

STATS.md

Latest commit

 

History

History
128 lines (109 loc) · 3.49 KB

STATS.md

File metadata and controls

128 lines (109 loc) · 3.49 KB
Raw

OAK — Stats Snapshot

Auto-generated by tools/build_stats.py at 2026-09-17 19:05 UTC.

Catalogue

  • 17 Tactics · 154 Techniques · 20 Threat Actors · 48 Mitigations · 41 Software · 12 Data Sources
  • 713 Worked Examples · 1555 bibtex entries

Examples by Tactic

Tactic Count
T1 (Token Genesis) 44
T2 (Liquidity Establishment) 34
T3 (Holder Capture) 41
T4 (Access Acquisition) 82
T5 (Value Extraction) 140
T6 (Defense Evasion) 56
T7 (Laundering) 187
T8 (Operator Continuity / Attribution Signals) 92
T9 (Smart-Contract Exploit) 234
T10 (Bridge / Cross-Chain) 71
T11 (Custody / Signing) 162
T12 (NFT-Specific) 28
T13 (Account Abstraction) 21
T14 (Validator / Staking) 40

Examples by Year

Year Count
2010 4
2011 7
2012 5
2013 10
2014 8
2015 6
2016 5
2017 10
2018 12
2019 10
2020 30
2021 47
2022 99
2023 102
2024 152
2025 78
2026 128

Examples by Year-Month (recent dense window)

Year-Month Count
2024-10 6
2024-11 2
2024-12 6
2025-01 14
2025-02 8
2025-03 8
2025-04 9
2025-05 3
2025-06 4
2025-07 6
2025-08 3
2025-09 6
2025-10 4
2025-11 3
2025-12 4
2026-01 5
2026-02 3
2026-03 8
2026-04 11
2026-05 18
2026-06 21
2026-07 21
2026-08 15
2026-09 14

Attribution-strength Distribution

Strength Count
pseudonymous 356 (49.9%)
unattributed 160 (22.4%)
confirmed 127 (17.8%)
inferred-strong 66 (9.3%)
inferred-weak 4 (0.6%)

Threat Actors

  • 20 of 20 actors have at least one attributed example
Actor Examples
OAK-G01 (lazarus) 122
OAK-G02 (drainer-services) 11
OAK-G03 (russian-laundering-infrastructure) 6
OAK-G10 (alphv-blackcat) 5
OAK-G04 (dprk-it-worker-scheme) 4
OAK-G05 (lockbit) 4
OAK-G07 (apt43-kimsuky) 2
OAK-G08 (bluenoroff) 2
OAK-G09 (andariel) 2
OAK-G14 (clop-cl0p) 2
OAK-G12 (scattered-spider) 2
OAK-G15 (ransomhub) 2
OAK-G13 (iranian-crypto-operators) 1
OAK-G06 (evil-corp) 1
OAK-G19 (darkside) 1
OAK-G17 (blackbyte) 1
OAK-G18 (karakurt) 1
OAK-G11 (black-basta) 1
OAK-G16 (akira) 1
OAK-G20 (teampcp) 1

Coverage Gaps

  • Actors with empty ## Observed Examples anchor: 0 of 20
  • Techniques with empty ## Real-world examples anchor: 2 of 154

Open TAXONOMY-GAPS Proposals

88 candidate sub-Technique IDs referenced in TAXONOMY-GAPS.md.

T1.006 T1.007 T10.002 T10.002.001 T10.006 T10.007 T10.009 T11.003 T11.004 T11.005 T11.005.001 T11.005.002 T11.005.003 T11.006 T11.006.001 T11.006.002 T11.007 T11.007.001 T11.007.002 T11.007.003 T11.008 T11.009 T11.010 T11.011 T11.011.001 T11.012 T11.013 T12.001 T12.003 T12.004 T12.005 T12.006 T12.007 T12.008 T13.002 T13.003 T13.004 T14.001 T14.003 T14.003.001 T15.001 T15.003 T15.004 T15.005 T15.006 T15.007 T16.001 T16.006 T3.004 T3.006 T4.003 T4.004 T4.005 T4.007 T4.008 T4.009 T4.010 T4.011 T4.012 T4.012.001 T4.012.002 T4.013 T4.013.001 T5.007 T6.005 T6.006 T6.007 T6.008 T7.007 T7.008 T9.001 T9.004 T9.004.001 T9.004.002 T9.006 T9.006.001 T9.006.002 T9.006.003 T9.006.004 T9.006.005 T9.007 T9.008 T9.009 T9.011 T9.011.001 T9.014 T9.015 T9.015.001