APT5
APT5 is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 8 sectors, including Government and Technology, in 14 countries, including the United States and the United Kingdom. It uses 33 MITRE ATT&CK techniques and exploits 6 known CVEs.
- Mulberry Typhoon
- MANGANESE
- BRONZE FLEETWOOD
- Keyhole Panda
- UNC2630
- TEMP.Bottle
- TG-2754
- Poisoned Flight
- Origin
- China
- Techniques
- 33
- Exploited CVEs
- 6
- First seen
- Jan 1, 2007
- Last seen
- May 1, 2024
- Record updated
Who They Target.
About APT5.
APT5 is a China-based espionage actor that has been active since at least 2007 primarily targeting the telecommunications, aerospace, and defense industries throughout the U.S., Europe, and Asia. APT5 has displayed advanced tradecraft and significant interest in compromising networking devices and their underlying software including through the use of zero-day exploits.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.