APT19
APT19 is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 4 countries, including the United States and Australia. It uses 38 MITRE ATT&CK techniques and exploits 9 known CVEs.
Also known as
- Codoso
- C0d0so0
- Codoso Team
- Sunshop Group
- Bronze Firestone
- Pupa
- Red Pegasus
- TG-3551
- Origin
- China
- Techniques
- 38
- Exploited CVEs
- 9
- First seen
- Jan 1, 2013
- Last seen
- May 1, 2017
- Record updated
Who They Target.
Sectors · 14
Countries · 4
Labelsespionage
About APT19.
APT19 has been active since at least 2013. APT19 is a Chinese-based threat group that has targeted a variety of industries, including defense, finance, energy, pharmaceutical, telecommunications, high tech, education, manufacturing, and legal services.
Last updated Jun 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.