FireEye monitored more than 12 million malware communications-or callbacks-to command and control (CnC) servers across hundreds of thousands of infected enterprise hosts during 2012. Callbacks were sent to more than 184 countries with more than 12 million communication events logged. This map shows the percent of callbacks to the top five locations of CnC servers detected by FireEye appliances around the world. Target countries indicate where the companies being attacked are located. Callback countries are where the initial CnC servers are located. Additional callbacks may occur from the initial CnC servers to locations in different countries.