Skip to content

STATS.md

Latest commit

 

History

History
127 lines (108 loc) · 3.16 KB

STATS.md

File metadata and controls

127 lines (108 loc) · 3.16 KB

OAK — Stats Snapshot

Auto-generated by tools/build_stats.py at 2026-05-27 06:42 UTC.

Catalogue

  • 17 Tactics · 144 Techniques · 19 Threat Actors · 43 Mitigations · 41 Software · 12 Data Sources
  • 622 Worked Examples · 1488 bibtex entries

Examples by Tactic

Tactic Count
T1 (Token Genesis) 40
T2 (Liquidity Establishment) 32
T3 (Holder Capture) 34
T4 (Access Acquisition) 71
T5 (Value Extraction) 109
T6 (Defense Evasion) 50
T7 (Laundering) 149
T8 (Operator Continuity / Attribution Signals) 81
T9 (Smart-Contract Exploit) 192
T10 (Bridge / Cross-Chain) 48
T11 (Custody / Signing) 133
T12 (NFT-Specific) 31
T13 (Account Abstraction) 20
T14 (Validator / Staking) 39

Examples by Year

Year Count
2010 4
2011 7
2012 5
2013 10
2014 8
2015 6
2016 5
2017 10
2018 12
2019 10
2020 30
2021 45
2022 97
2023 106
2024 153
2025 75
2026 39

Examples by Year-Month (recent dense window)

Year-Month Count
2024-06 17
2024-07 10
2024-08 11
2024-09 12
2024-10 6
2024-11 2
2024-12 6
2025-01 13
2025-02 7
2025-03 8
2025-04 9
2025-05 3
2025-06 3
2025-07 6
2025-08 3
2025-09 6
2025-10 4
2025-11 3
2025-12 4
2026-01 4
2026-02 1
2026-03 5
2026-04 11
2026-05 7

Attribution-strength Distribution

Strength Count
pseudonymous 287 (46.1%)
unattributed 145 (23.3%)
confirmed 125 (20.1%)
inferred-strong 63 (10.1%)
inferred-weak 2 (0.3%)

Threat Actors

  • 19 of 19 actors have at least one attributed example
Actor Examples
OAK-G01 (lazarus) 119
OAK-G02 (drainer-services) 11
OAK-G03 (russian-laundering-infrastructure) 6
OAK-G10 (alphv-blackcat) 5
OAK-G05 (lockbit) 4
OAK-G04 (dprk-it-worker-scheme) 3
OAK-G14 (clop-cl0p) 2
OAK-G12 (scattered-spider) 2
OAK-G15 (ransomhub) 2
OAK-G07 (apt43-kimsuky) 1
OAK-G13 (iranian-crypto-operators) 1
OAK-G06 (evil-corp) 1
OAK-G19 (darkside) 1
OAK-G08 (bluenoroff) 1
OAK-G09 (andariel) 1
OAK-G17 (blackbyte) 1
OAK-G18 (karakurt) 1
OAK-G11 (black-basta) 1
OAK-G16 (akira) 1

Coverage Gaps

  • Actors with empty ## Observed Examples anchor: 0 of 19
  • Techniques with empty ## Real-world examples anchor: 0 of 144

Open TAXONOMY-GAPS Proposals

52 candidate sub-Technique IDs referenced in TAXONOMY-GAPS.md.

T1.006 T1.007 T10.007 T11.004 T11.005 T11.005.001 T11.005.002 T11.005.003 T11.006 T11.006.001 T11.006.002 T11.007 T11.007.001 T11.007.002 T11.007.003 T11.008 T11.009 T11.010 T11.011 T11.012 T11.013 T13.002 T13.003 T13.004 T14.001 T14.003 T14.003.001 T3.004 T3.006 T4.007 T4.008 T4.009 T4.010 T4.011 T5.007 T6.005 T6.006 T6.007 T6.008 T7.007 T7.008 T9.001 T9.006 T9.006.001 T9.006.002 T9.006.003 T9.006.004 T9.006.005 T9.007 T9.008 T9.009 T9.014