Skip to the main content.
Resources
For Users
About ThreatBook

2025 Hong Kong Threat Landscape Report

(March 2026 Edition)

The definitive threat intelligence briefing for security leaders navigating Asia's most complex cyber battleground.

WHAT'S INSIDE

  • Ransomware group profiles: Nightspire, RansomHub, Akira

  • APT actor analysis: Lazarus, Earth Bluecrow, LotusBlossom

  • Why Hong Kong's payment rate is 54% above the global average

  • Attack type breakdown: data theft, phishing, breaches, APT

  • MITRE ATT&CK-mapped tactics, techniques, and procedures

  • Actionable defensive recommendations for CISOs and IT leaders

Get the Full Report
23 pages · Free · Instant access

43
%

Ransomware Payment Rate (Global avg: 28%)

4.2
mo

Average Dwell Time
for Data Theft Attacks

39.8
%

Phishing Success Rate
(Global avg: 24%)

3

Active Ransomware
Groups Profiled

REPORT CONTENTS

23 Pages of Actionable Intelligence

Built for CISOs and IT security leaders navigating Hong Kong's uniquely complex threat environment — cross-border risk, multi-jurisdictional compliance, and APT groups with strategic objectives beyond financial gain.

 

Chapter 1

2025 Threat Overview

Hong Kong's attack landscape: dominant threat types, why payment rates exceed global averages, and the structural vulnerabilities attackers exploit.

Chapter 2

Ransomware Group Profiles

In-depth profiles of Nightspire, RansomHub, and Akira — including TTPs, target sectors, localization tactics, and documented Hong Kong incidents.

Chapter 3

APT Actor Analysis

State-linked groups with active Hong Kong operations: Lazarus, Earth Bluecrow, and LotusBlossom.

Chapter 4

Attack Type Breakdown

Data theft (30%), phishing (20%), data breaches (19%), APT infiltration (17%) — with structural explanations for Hong Kong's above-average rates.

Chapter 5

MITRE ATT&CK Mapping

Structured TTP mapping for all profiled actors — usable directly for detection engineering, red team planning, and control gap assessment.

Chapter 6

Defensive Recommendations

Prioritized controls addressing Hong Kong's specific risk profile — multi-jurisdictional compliance pressure, supply chain exposure, and APT dwell time.