Confucius
Confucius is an India-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 6 sectors, including Government, and Education and Research, in 18 countries, including the United States and the United Kingdom. It uses 32 MITRE ATT&CK techniques and exploits 3 known CVEs.
- Confucius APT
- G0142
- Origin
- India
- Techniques
- 32
- Exploited CVEs
- 3
- First seen
- Jan 1, 2013
- Last seen
- Aug 17, 2021
- Record updated
Who They Target.
About Confucius.
Confucius is a cyber espionage group that has primarily targeted military personnel, high-profile personalities, business persons, and government organizations in South Asia since at least 2013. Security researchers have noted similarities between Confucius and Patchwork, particularly in their respective custom malware code and targets.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.