UnclassifiedUnknown
CL-STA-1238
CL-STA-1238 is a China-attributed threat actor group, tracked by Brandefense. It targets 3 sectors, including Technology, and Defense and Aerospace, in the United States and Canada. It uses 15 MITRE ATT&CK techniques.
- Origin
- China
- Techniques
- 15
- Exploited CVEs
- No CVE data
- First seen
- Aug 1, 2026
- Last seen
- Sep 30, 2026
- Record updated
Who They Target.
Countries · 2
About CL-STA-1238.
A China-linked cluster that ran 25 autonomous, AI-driven intrusion operations against at least 19 organizations between August and September 2026, using the Cairn framework connected to DeepSeek and Zhipu GLM models.
Last updated Nov 13, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.