Nation-state APTEspionage
CardinalLizard
CardinalLizard is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets organisations in 4 countries, including Russia and Malaysia.
- Origin
- China
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2014
- Record updated
Who They Target.
Countries · 4
About CardinalLizard.
CardinalLizard, a cyber threat actor linked to China, has targeted entities in Asia since 2018. Their methods include spear-phishing, custom malware with anti-detection features, and potentially shared infrastructure with other actors.
Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.