Focusing on the Weakest Link: A Similarity Analysis on Phishing Campaigns Based on the ATT&CK Matrix

Table 9

Similarity of phishing campaigns conducted by APT37.

	TA0001	TA0002	TA0003	TA0004	TA0005	TA0006	TA0007	TA0008	TA0009	TA0011	TA0010	TA0040
(A1, A2)	1	0.6869	0	0	0.6885	0.8321	0.9970	0	0.9268	0.9970	1	0
(A1, A3)	1	0.6633	0	0.8391	0.9744	0	0.9744	0	0.8812	0.7908	1	0
(A2, A3)	1	0.9048	0	0	0.9611	1	0.9685	0	0.7864	0.7803	1	0
Avg.	1	0.7517	0	0.2797	0.8747	0.6107	0.9800	0	0.8648	0.8560	1	0