GALLIUM
GALLIUM is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 8 sectors, including Government and Technology, in 12 countries, including Australia and Russia. It uses 38 MITRE ATT&CK techniques and exploits 5 known CVEs.
- Granite Typhoon
- Soft Cell
- Alloy Taurus
- Phantom Panda
- G0093
- Origin
- China
- Techniques
- 38
- Exploited CVEs
- 5
- First seen
- Jan 1, 2012
- Last seen
- Jun 13, 2022
- Record updated
Who They Target.
About GALLIUM.
GALLIUM is a cyberespionage group that has been active since at least 2012, primarily targeting telecommunications companies, financial institutions, and government entities in Afghanistan, Australia, Belgium, Cambodia, Malaysia, Mozambique, the Philippines, Russia, and Vietnam. This group is particularly known for launching Operation Soft Cell, a long-term campaign targeting telecommunications providers.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.