Ke3chang
Ke3chang is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 68 countries, including the United States and the United Kingdom. It uses 88 MITRE ATT&CK techniques and exploits 2 known CVEs.
Also known as
- APT15
- Mirage
- Vixen Panda
- Playful Dragon
- RoyalAPT
- NICKEL
- Nylon Typhoon
- GREF
- Origin
- China
- Techniques
- 88
- Exploited CVEs
- 2
- First seen
- Jan 1, 2010
- Last seen
- May 1, 2024
- Record updated
Who They Target.
Sectors · 14
Countries · 68
Labelsespionage
About Ke3chang.
Ke3chang is a threat group attributed to actors operating out of China. Ke3chang has targeted oil, government, diplomatic, military, and NGOs in Central and South America, the Caribbean, Europe, and North America since at least 2010.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.