Skip to content
Threat actors by attributed origin

China-Attributed Threat Actors.

Brandefense tracks 193 threat actors attributed to China. The most documented are APT41, Mustang Panda and GhostEmperor. The sectors they target most are Government, Technology and Manufacturing.

96 of 111 published profiles shown

Blue Termite, Cloudy OmegaChina
aka Blue Termite · Cloudy Omega
Nation-state APTEspionage

Blue Termite, Cloudy Omega is a China-attributed nation-state APT group with an espionage motive. It targets 12 sectors, including Government and Technology, in Japan.

0TTPs
–No CVE data
1malware
Not ratedProfile →
Moshen DragonChina
aka Nomad Panda · TEMP.Trident
Nation-state APTEspionage

Moshen Dragon is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
9malware
Not ratedProfile →
GambleForceChina
Nation-state APTEspionage

GambleForce is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
4malware
Not ratedProfile →
GraylingChina
Nation-state APTEspionage

Grayling is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
5malware
Not ratedProfile →
MikroceenChina
aka SixLittleMonkeys
Nation-state APTEspionage

Mikroceen is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
7malware
Not ratedProfile →
Unfading Sea HazeChina
Nation-state APTEspionage

Unfading Sea Haze is a China-attributed nation-state APT group with an espionage motive. It targets the Government, and Defense and Aerospace sectors.

0TTPs
–No CVE data
12malware
Not ratedProfile →
Earth BerberokaChina
aka GamblingPuppet
Nation-state APTEspionage

Earth Berberoka is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
7malware
Not ratedProfile →
UAT-8302China
Nation-state APTEspionage

UAT-8302 is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector.

0TTPs
–No CVE data
6malware
AdvancedProfile →
Anchor Panda, APT 14China
aka Anchor Panda · APT 14 · Aluminum +1
Nation-state APTEspionage

Anchor Panda, APT 14 is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
3malware
Not ratedProfile →
RedAlphaChina
aka DeepCliff · Red Dev 3
Nation-state APTEspionage

RedAlpha is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in 6 countries, including India and Thailand.

0TTPs
–No CVE data
5malware
Not ratedProfile →
AntlionChina
Nation-state APTEspionage

Antlion is a China-attributed nation-state APT group with an espionage motive. It targets the Manufacturing and Finance sectors in Taiwan.

0TTPs
–No CVE data
8malware
Not ratedProfile →
Roaming TigerChina
aka Rotten Tomato · CTG-7273 · Bronze Woodland
Nation-state APTEspionage

Roaming Tiger is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 7 countries, including Russia and Ukraine.

0TTPs
–No CVE data
3malware
Not ratedProfile →
RedGolfChina
Nation-state APTEspionage

RedGolf is a China-attributed nation-state APT group with an espionage motive. It targets 6 sectors, including Government and Technology, in the United States.

0TTPs
–No CVE data
3malware
Not ratedProfile →
CeranaKeeperChina
Nation-state APTEspionage

CeranaKeeper is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in 5 countries, including Japan and Taiwan.

0TTPs
–No CVE data
3malware
Not ratedProfile →
SiestaChina
Nation-state APTEspionage

Siesta is a China-attributed nation-state APT group with an espionage motive. It targets 8 sectors, including Government and Finance.

0TTPs
–No CVE data
1malware
Not ratedProfile →
PlushDaemonChina
Nation-state APTEspionage

PlushDaemon is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 6 countries, including the United States and China.

0TTPs
–No CVE data
3malware
Not ratedProfile →
Lucky CatChina
Nation-state APTEspionage

Lucky Cat is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
4malware
Not ratedProfile →
BookwormChina
Nation-state APTEspionage

Bookworm is a China-attributed nation-state APT group with an espionage motive. It targets the Government, and Defense and Aerospace sectors in Thailand.

0TTPs
–No CVE data
5malware
Not ratedProfile →
IronHuskyChina
aka BBCY-TA1 · Operation “MysterySnail”
Nation-state APTEspionage

IronHusky is a China-attributed nation-state APT group with an espionage motive. It targets 3 sectors, including Government and Finance, in Russia and Mongolia.

0TTPs
–No CVE data
3malware
Not ratedProfile →
TheWizardsChina
Nation-state APTEspionage

TheWizards is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 4 countries, including China and the Philippines.

0TTPs
–No CVE data
3malware
Not ratedProfile →
Curious GorgeChina
aka UNC3742
Nation-state APTEspionage

Curious Gorge is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
0malware
Not ratedProfile →
ScarabChina
aka UAC-0026
RansomwareEspionage

Scarab is a China-attributed ransomware group with an espionage motive. It targets organisations in 4 countries, including the United States and Russia.

0TTPs
–No CVE data
2malware
Not ratedProfile →
LeadChina
aka TG-3279 · Casper
Nation-state APTEspionage

Lead is a China-attributed nation-state APT group with an espionage motive. It targets 3 sectors, including Technology and Healthcare, in the United States and Japan.

0TTPs
–No CVE data
2malware
Not ratedProfile →
BlackgearChina
aka Topgear
Nation-state APTEspionage

Blackgear is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 3 countries, including Japan and Taiwan.

0TTPs
–No CVE data
3malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.