Recently Microsoft released a statement on the increase in cyber activity from Russian threat group targeting entities in the United States. Russian threat operatives continue to target and successfully compromise various entities throughout the United States, which jumped from 21% in 2020 to 32% in 2021. Out of the numerous Russian threat actors, the most active entity is the Nobelium threat group who aggressively target government entities and IT service providers throughout the US. Nobelium’s operational goals include gaining persistent access to their targets and harvesting intelligence, all while causing major disruptions in operations of their target. Alongside Nobelium, threat groups Kimsuky (North Korea) and Charming Kitten (Iran) are also very active threat groups who target a variety of entities including diplomatic officials, journalists, think tanks, and more. These groups make up 84% of all Microsoft-observed cyber-attacks between 2020 – 2021. Furthermore, countries with the most active threat groups are Iran, Russia, North Korea, Vietnam, China, and Turkey according to the report from Microsoft. CTAPT is monitoring the movements of numerous threat actors and these statistics will provide us with a more in-depth look at the entities mentioned.