Skip to content
Nation-state APTEspionageAdvanced sophistication · State-backed

APT17

APT17 is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 19 sectors, including Government and Technology, in 21 countries, including the United States and the United Kingdom. It uses 18 MITRE ATT&CK techniques and exploits 22 known CVEs.

Also known as
  • Deputy Dog
  • Aurora Panda
  • Hidden Lynx
  • Tailgater Team
  • Burning Umbrella
Origin
China
Techniques
18
Exploited CVEs
22
First seen
Jan 1, 2009
Last seen
Jan 1, 2015
Record updated

Who They Target.

Labelsespionage

About APT17.

APT17 has been active since at least 2009. APT17 is a China-based threat group that has conducted network intrusions against U.S.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.