Skip to content
Threat actors by attributed origin

China-Attributed Threat Actors.

Brandefense tracks 193 threat actors attributed to China. The most documented are APT41, Mustang Panda and GhostEmperor. The sectors they target most are Government, Technology and Manufacturing.

24 of 111 published profiles shown

GhostEmperorChina
aka FamousSparrow · Earth Estrie · UNC2286 +4
Nation-state APTEspionage

GhostEmperor is a China-attributed nation-state APT group with an espionage motive.

140TTPs
47exploited
67malware
StrategicProfile →
Earth LuscaChina
aka TAG-22 · Charcoal Typhoon · CHROMIUM +1
Nation-state APTEspionage

Earth Lusca is a China-attributed nation-state APT group with an espionage motive.

93TTPs
37exploited
83malware
AdvancedProfile →
menuPassChina
aka Cicada · POTASSIUM · Stone Panda +5
Nation-state APTEspionage

menuPass is a China-attributed nation-state APT group with an espionage motive.

100TTPs
22exploited
75malware
AdvancedProfile →
Aquatic PandaChina
aka Bronze University · G0143
Nation-state APTEspionage

Aquatic Panda is a China-attributed nation-state APT group with an espionage motive.

80TTPs
19exploited
29malware
AdvancedProfile →
ChimeraChina
aka CUTR · Chimera Under the Radar
Nation-state APTEspionage

Chimera is a China-attributed nation-state APT group with an espionage motive.

92TTPs
2exploited
17malware
AdvancedProfile →
Ke3changChina
aka APT15 · Mirage · Vixen Panda +5
Nation-state APTEspionage

Ke3chang is a China-attributed nation-state APT group with an espionage motive.

88TTPs
2exploited
31malware
AdvancedProfile →
LeviathanChina
aka MUDCARP · Kryptonite Panda · Gadolinium +12
Nation-state APTEspionage

Leviathan is a China-attributed nation-state APT group with an espionage motive.

78TTPs
9exploited
33malware
AdvancedProfile →
APT3China
aka Gothic Panda · Pirpi · UPS Team +13
Nation-state APTEspionage

APT3 is a China-attributed nation-state APT group with an espionage motive.

74TTPs
10exploited
16malware
AdvancedProfile →
Tropic TrooperChina
aka Pirate Panda · KeyBoy · Earth Centaur +5
Nation-state APTEspionage

Tropic Trooper is a China-attributed nation-state APT group with an espionage motive.

64TTPs
8exploited
42malware
AdvancedProfile →
ToddyCatChina
aka Storm-0247 · Operation “Stayin’ Alive”
Nation-state APTEspionage

ToddyCat is a China-attributed nation-state APT group with an espionage motive.

54TTPs
7exploited
23malware
AdvancedProfile →
MirrorFaceChina
aka Earth Kasha · Operation LiberalFace · Operation “AkaiRyū”
Nation-state APTEspionage

MirrorFace is a China-attributed nation-state APT group with an espionage motive.

47TTPs
9exploited
29malware
AdvancedProfile →
Velvet AntChina
Nation-state APTEspionage

Velvet Ant is a China-attributed nation-state APT group with an espionage motive. It targets 3 sectors, including Technology and Manufacturing, in China.

48TTPs
2exploited
15malware
AdvancedProfile →
Night DragonChina
aka G0014
Nation-state APTEspionage

Night Dragon is a China-attributed nation-state APT group with an espionage motive.

48TTPs
–No CVE data
8malware
IntermediateProfile →
APT19China
aka Codoso · C0d0so0 · Codoso Team +5
Nation-state APTEspionage

APT19 is a China-attributed nation-state APT group with an espionage motive.

38TTPs
9exploited
17malware
AdvancedProfile →
GALLIUMChina
aka Granite Typhoon · Soft Cell · Alloy Taurus +2
Nation-state APTEspionage

GALLIUM is a China-attributed nation-state APT group with an espionage motive.

38TTPs
5exploited
36malware
AdvancedProfile →
APT17China
aka Deputy Dog · Aurora Panda · Hidden Lynx +2
Nation-state APTEspionage

APT17 is a China-attributed nation-state APT group with an espionage motive.

18TTPs
22exploited
35malware
AdvancedProfile →
Tonto TeamChina
aka Earth Akhlut · BRONZE HUNTLEY · Karma Panda +1
Nation-state APTEspionage

Tonto Team is a China-attributed nation-state APT group with an espionage motive.

38TTPs
1exploited
10malware
AdvancedProfile →
APT5China
aka Mulberry Typhoon · MANGANESE · BRONZE FLEETWOOD +5
Nation-state APTEspionage

APT5 is a China-attributed nation-state APT group with an espionage motive.

33TTPs
6exploited
15malware
AdvancedProfile →
BackdoorDiplomacyChina
Nation-state APTEspionage

BackdoorDiplomacy is a China-attributed nation-state APT group with an espionage motive.

30TTPs
6exploited
21malware
AdvancedProfile →
APT1China
aka Comment Crew · Comment Group · Comment Panda +11
Nation-state APTEspionage

APT1 is a China-attributed nation-state APT group with an espionage motive.

32TTPs
1exploited
47malware
AdvancedProfile →
TaidoorChina
Nation-state APTEspionage

Taidoor is a China-attributed nation-state APT group with an espionage motive.

25TTPs
4exploited
3malware
AdvancedProfile →
Dust StormChina
aka G0031 · Operation Dust Storm
Nation-state APTEspionage

Dust Storm is a China-attributed nation-state APT group with an espionage motive.

24TTPs
5exploited
8malware
AdvancedProfile →
NaikonChina
Nation-state APTEspionage

Naikon is a China-attributed nation-state APT group with an espionage motive.

27TTPs
1exploited
38malware
AdvancedProfile →
Putter PandaChina
aka 4HCrew · APT2 · G0024 +6
Nation-state APTEspionage

Putter Panda is a China-attributed nation-state APT group with an espionage motive.

18TTPs
10exploited
23malware
AdvancedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.