APT18
APT18 is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 12 sectors, including Government and Technology, in 3 countries, including the United States and the United Kingdom. It uses 18 MITRE ATT&CK techniques and exploits 1 known CVE.
Also known as
- TG-0416
- Dynamite Panda
- Threat Group-0416
- Wekby
- Scandium
- Satin Typhoon
- Red Wraith
- SILVERVIPER
- G0026
- Origin
- China
- Techniques
- 18
- Exploited CVEs
- 1
- First seen
- Jan 1, 2009
- Last seen
- Feb 17, 2017
- Record updated
Who They Target.
Sectors · 12
Countries · 3
Labelsespionageglobal
About APT18.
APT18 is a threat group that has operated since at least 2009 and has targeted a range of industries, including technology, manufacturing, human rights groups, government, and medical.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.