Skip to content
Nation-state APTEspionageAdvanced sophistication · State-backed

APT3

APT3 is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 10 countries, including the United States and the United Kingdom. It uses 74 MITRE ATT&CK techniques and exploits 10 known CVEs.

Also known as
  • Gothic Panda
  • Pirpi
  • UPS Team
  • Buckeye
  • Threat Group-0110
  • TG-0110
  • Group 6
  • Bronze Mayfair
  • Red Sylvan
  • Boron
  • Brocade Typhoon
  • G0022
  • Operation “Clandestine Fox”
  • Operation “Clandestine Fox”, Part Deux
  • Operation “Double Tap”
  • Operation “Clandestine Wolf”
Origin
China
Techniques
74
Exploited CVEs
10
First seen
Jan 1, 2010
Last seen
Nov 1, 2017
Record updated

Who They Target.

Labelsespionage

About APT3.

APT3 has been active since at least 2010. APT3 is a China-based threat group that researchers have attributed to China's Ministry of State Security.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.