Skip to content
Threat actors by attributed origin

China-Attributed Threat Actors.

Brandefense tracks 193 threat actors attributed to China. The most documented are APT41, Mustang Panda and GhostEmperor. The sectors they target most are Government, Technology and Manufacturing.

24 of 31 published profiles shown

APT41China
aka Wicked Panda · Brass Typhoon · BARIUM +2
Nation-state APTIdeology

APT41 is a China-attributed nation-state APT group with an ideological motive.

172TTPs
29exploited
124malware
StrategicProfile →
Mustang PandaChina
aka TA416 · RedDelta · BRONZE PRESIDENT +8
Nation-state APTIdeology

Mustang Panda is a China-attributed nation-state APT group with an ideological motive.

175TTPs
13exploited
106malware
AdvancedProfile →
Volt TyphoonChina
aka BRONZE SILHOUETTE · Vanguard Panda · DEV-0391 +4
Nation-state APTIdeology

Volt Typhoon is a China-attributed nation-state APT group with an ideological motive.

128TTPs
44exploited
35malware
AdvancedProfile →
UNC3886China
Nation-state APTIdeology

UNC3886 is a China-attributed nation-state APT group with an ideological motive.

99TTPs
13exploited
26malware
AdvancedProfile →
Lotus BlossomChina
aka DRAGONFISH · Spring Dragon · RADIUM +1
Nation-state APTIdeology

Lotus Blossom is a China-attributed nation-state APT group with an ideological motive.

76TTPs
7exploited
19malware
AdvancedProfile →
BRONZE BUTLERChina
aka REDBALDKNIGHT · Tick · Stalker Panda +9
Nation-state APTIdeology

BRONZE BUTLER is a China-attributed nation-state APT group with an ideological motive.

70TTPs
10exploited
38malware
AdvancedProfile →
Silk TyphoonChina
aka Operation Exchange Marauder · Hafnium · Red Dev 13 +2
Nation-state APTIdeology

Silk Typhoon is a China-attributed nation-state APT group with an ideological motive.

61TTPs
17exploited
17malware
AdvancedProfile →
Violet TyphoonChina
aka APT31 · ZIRCONIUM · Judgment Panda +5
Nation-state APTIdeology

Violet Typhoon is a China-attributed nation-state APT group with an ideological motive.

73TTPs
2exploited
62malware
AdvancedProfile →
WinntiChina
aka Blackfly · Winnti Umbrella · Winnti Group
Nation-state APTIdeology

Winnti is a China-attributed nation-state APT group with an ideological motive.

50TTPs
15exploited
23malware
AdvancedProfile →
UNC5221China
aka UTA0178
Nation-state APTIdeology

UNC5221 is a China-attributed nation-state APT group with an ideological motive.

29TTPs
4exploited
44malware
AdvancedProfile →
TGR-STA-1030China
aka UNC6619
UnclassifiedIdeology

TGR-STA-1030 is a China-attributed threat actor group with an ideological motive. It targets organisations in 14 countries, including India and France.

20TTPs
–No CVE data
23malware
AdvancedProfile →
BlackTechChina
aka Palmerworm · Circuit Panda · Radio Panda +10
Nation-state APTIdeology

BlackTech is a China-attributed nation-state APT group with an ideological motive.

16TTPs
1exploited
28malware
AdvancedProfile →
Autumn DragonChina
Nation-state APTIdeology

Autumn Dragon is a China-attributed nation-state APT group with an ideological motive. It targets 6 sectors, including Government, and Transportation and Logistics.

16TTPs
–No CVE data
0malware
AdvancedProfile →
Earth KurmaChina
UnclassifiedIdeology

Earth Kurma is a China-attributed threat actor group with an ideological motive.

13TTPs
–No CVE data
13malware
AdvancedProfile →
APT16China
aka SVCMONDR · G0023
Nation-state APTIdeology

APT16 is a China-attributed nation-state APT group with an ideological motive.

7TTPs
3exploited
3malware
ExpertProfile →
Red HeronChina
UnclassifiedIdeology

Red Heron is a China-attributed threat actor group with an ideological motive.

8TTPs
–No CVE data
2malware
AdvancedProfile →
Chinese State-Sponsored APTsChina
UnclassifiedIdeology

Chinese State-Sponsored APTs is a China-attributed threat actor group with an ideological motive.

8TTPs
–No CVE data
5malware
AdvancedProfile →
Storm-3069China
UnclassifiedIdeology

Storm-3069 is a China-attributed threat actor group with an ideological motive. It targets 5 sectors, including Government and Healthcare.

7TTPs
–No CVE data
2malware
AdvancedProfile →
VerdantBambooChina
UnclassifiedIdeology

VerdantBamboo is a China-attributed threat actor group with an ideological motive. It targets organisations in India.

6TTPs
1exploited
0malware
AdvancedProfile →
TA419China
UnclassifiedIdeology

TA419 is a China-attributed threat actor group with an ideological motive. It targets 6 sectors, including Government and Technology, in the United States and Japan.

5TTPs
–No CVE data
1malware
AdvancedProfile →
UTA0565China
UnclassifiedIdeology

UTA0565 is a China-attributed threat actor group with an ideological motive.

5TTPs
–No CVE data
1malware
AdvancedProfile →
OP-512China
UnclassifiedIdeology

OP-512 is a China-attributed threat actor group with an ideological motive. It uses 5 MITRE ATT&CK techniques.

5TTPs
–No CVE data
1malware
AdvancedProfile →
Earth AmmitChina
aka Dalbit
UnclassifiedIdeology

Earth Ammit is a China-attributed threat actor group with an ideological motive.

3TTPs
–No CVE data
27malware
AdvancedProfile →
UNK_ColtCenturyChina
aka TAG-100 · Storm-2077 · RedNovember
UnclassifiedIdeology

UNK_ColtCentury is a China-attributed threat actor group with an ideological motive.

3TTPs
–No CVE data
15malware
AdvancedProfile →
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.