Skip to content
UnclassifiedUnknown

AgainstTheWest

AgainstTheWest is a threat actor group, tracked by Brandefense. It uses 1 MITRE ATT&CK technique.

Also known as
  • APT49
Techniques
1
Exploited CVEs
No CVE data
Record updated

How They Operate · MITRE ATT&CK.

1 techniques across 1 of 14 tactics

Reconnaissance·

Resource Development·

Initial Access·

Execution·

Persistence·

Privilege Escalation·

Defense Evasion·

Credential Access1

T1552.004
Unsecured Credentials: Private Keys

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact·

About AgainstTheWest.

BlueHornet is an advanced persistent threat group targeting government organizations in China, North Korea, Iran, and Russia. They have compromised and leaked data from other APT groups like Kryptonite Panda and Lazarus Group. BlueHornet has been involved in campaigns such as Operation Renminbi, Operation Ruble, and Operation EUSec, focusing on exfiltrating region-specific data and selling it on the dark web. They have also been known to collaborate with different threat actors and have recently disclosed a zero-day exploit in NGINX 1.18.

Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.