Skip to content
Threat actors by attributed origin

China-Attributed Threat Actors.

Brandefense tracks 193 threat actors attributed to China. The most documented are APT41, Mustang Panda and GhostEmperor. The sectors they target most are Government, Technology and Manufacturing.

16 of 16 published profiles shown

ActorTypeOriginMotivationSophisticationExploited CVEsTop malware
Rocke3 aliasesCybercrimeChinaFinancialAdvanced10–
TeamTNT4 aliasesCybercrimeChinaFinancialAdvanced4–
Storm-26032 aliasesCybercrimeChinaFinancialAdvanced4–
Silver Fox5 aliasesCybercrimeChinaFinancialAdvanced––
Warlock1 aliasRansomwareChinaFinancialAdvanced2–
Cinnamon Tempest6 aliasesCybercrimeChinaFinancialAdvanced8–
Storm-29900 aliasesCybercrimeChinaFinancialAdvanced–CoGUI
Storm-31191 aliasCybercrimeChinaFinancialIntermediate––
TA49220 aliasesCybercrimeChinaFinancialAdvanced––
GhostRedirector0 aliasesCybercrimeChinaFinancialAdvanced––
Outsider Enterprise0 aliasesCybercrimeChinaFinancialAdvanced––
TA5300 aliasesCybercrimeChinaFinancialNot rated––
Yingmob0 aliasesCybercrimeChinaFinancialNot rated––
Pacha Group0 aliasesCybercrimeChinaFinancialNot rated––
Yanbian Gang0 aliasesCybercrimeChinaFinancialNot rated––
Vigorish Viper0 aliasesCybercrimeChinaFinancialAdvanced––
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.