# Who is targeting professional and Business Services organisations?

> Public reporting links 6 threat groups to attacks on professional and Business Services organisations, including Tortoiseshell, Molerats and AridViper. 5 of them are thought to have state backing. This page lists them and where they are thought to operate from, so you can see who might come after a business like yours.

Canonical page: https://www.edgeprotect.io/industries/professional-business-services
Breadcrumb: [Home](https://www.edgeprotect.io/) > [Industries](https://www.edgeprotect.io/industries) > Professional and Business Services

## At a glance

| Fact | Value |
|---|---|
| Threat groups linked | 6 |
| Sectors with their own page | 3 |
| Suspected state backing | 5 of 6 |
| Countries of origin | 3 |

## Which groups target professional and Business Services organisations?

| Group | Thought to operate from | Suspected state backing | Profile |
|---|---|---|---|
| Tortoiseshell | Iran | Iran (Islamic Republic of) | https://www.edgeprotect.io/threat-actors/tortoiseshell |
| Molerats | Palestinian Territories | Palestine | https://www.edgeprotect.io/threat-actors/molerats |
| AridViper | Palestinian Territories | Palestine | https://www.edgeprotect.io/threat-actors/aridviper |
| APT41 | China | People's Republic of China | https://www.edgeprotect.io/threat-actors/apt41 |
| BRONZE SPRING | China | No | https://www.edgeprotect.io/threat-actors/bronze-spring |
| APT42 | Iran | Iran (Islamic Republic of) | https://www.edgeprotect.io/threat-actors/apt42 |

## Where are they thought to operate from?

- Iran: 2
- Palestinian Territories: 2
- China: 2

## What counts as professional and Business Services?

- [Legal services](https://www.edgeprotect.io/sub-industries/legal-services): 5 groups
- [Business process outsourcing](https://www.edgeprotect.io/sub-industries/business-process-outsourcing): 2 groups (also called business services, business process outsourcers)
- [Human resource services](https://www.edgeprotect.io/sub-industries/human-resource-services): 1 group (also called professional services, employment services, event services)

## Frequently asked questions

### Which threat groups target professional and Business Services organisations?

Public reporting links 6 threat groups to attacks on professional and Business Services organisations, including Tortoiseshell, Molerats, AridViper, APT41 and BRONZE SPRING.

### Where are these groups thought to operate from?

Most are thought to operate from Iran (2), Palestinian Territories (2) and China (2). 5 of the 6 are thought to have backing from a government.

### What counts as professional and Business Services?

Public reporting describes professional and Business Services victims in several ways. The narrower sectors with groups of their own are legal services (5), business process outsourcing (2) and human resource services (1).

### How can I check my own organisation's exposure?

Create an account and tell us the software you run. We match it against known flaws, rank each one from 0 to 100 using evidence it is being exploited, let you know as soon as something changes that affects you, and show which groups and ransomware gangs are hitting your sector.

## Check whether it matters to your business

A free EdgeProtect account (no card needed) matches the software you run against known flaws, including those linked to threat groups, ranks each one from 0 to 100 and tells you as soon as we spot something that affects you. It also shows which threat groups and ransomware gangs are hitting your sector, with profiles of over 900 groups and a PDF dossier for each.

- Start free: https://www.edgeprotect.io/register
- Book a demo: https://www.edgeprotect.io/contact