Cybersecurity statistics / Adversary Infrastructure

China remained the second largest adversary infrastructure hosting location at 13.55%, down from 17.57% the previous year.

Publisher	Bridewell
Report	Cyber Threat Intelligence Report 2026
Published	18 May 2026
Topics	Adversary Infrastructure, China

Published by Bridewell in Cyber Threat Intelligence Report 2026 , 18 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

Germany increased to 8.74%, becoming the third largest adversary infrastructure hosting location and overtaking both Hong Kong (7.22%) and the Netherlands (6.51%).

Bridewell, 27/05/2026

In 2025, 27.89% of all adversary infrastructure tracked was hosted in the US, an increase from 23.63% in 2024.

Bridewell, 27/05/2026

BEAST threat actor leaked 700 GB of internal data from a large Chinese automotive group in late February 2026

PCA Cyber Security, 27/05/2026

China's amended Cybersecurity Law took effect on 1 January 2026 (passed 28 October 2025) with raised penalties and extraterritorial reach

PCA Cyber Security, 27/05/2026

China hosted 42.3% of all tracked Cobalt Strike infrastructure, the US hosted 18.9%, and Hong Kong hosted 15.8%.

Bridewell, 27/05/2026

Targeting of the logistics vertical by China-nexus actors increased by 85%.

CrowdStrike, 27/05/2026

Get the newsletter

Weekly cybersecurity statistics by email.