Skip to content
Threat actors by attributed origin

China-Attributed Threat Actors.

Brandefense tracks 193 threat actors attributed to China. The most documented are APT41, Mustang Panda and GhostEmperor. The sectors they target most are Government, Technology and Manufacturing.

31 of 31 published profiles shown

LightBasinChina
aka UNC1945 · TH-239 · DecisiveArchitect +1
UnclassifiedIdeology

LightBasin is a China-attributed threat actor group with an ideological motive. It targets 3 sectors, including Technology and Finance.

2TTPs
1exploited
23malware
AdvancedProfile →
Chinese intelligence servicesChina
aka Chinese state actors · Chinese military intelligence officers and their affiliates
UnclassifiedIdeology

Chinese intelligence services is a China-attributed threat actor group with an ideological motive.

3TTPs
–No CVE data
0malware
AdvancedProfile →
Storm-0558China
aka Antique Typhoon
UnclassifiedIdeology

Storm-0558 is a China-attributed threat actor group with an ideological motive. It targets 4 sectors, including Government and Telecommunications, in the United States.

1TTPs
–No CVE data
2malware
AdvancedProfile →
Earth LongzhiChina
UnclassifiedIdeology

Earth Longzhi is a China-attributed threat actor group with an ideological motive. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
6malware
AdvancedProfile →
TA428China
UnclassifiedIdeology

TA428 is a China-attributed threat actor group with an ideological motive. It targets the Government sector in 5 countries, including Russia and Ukraine.

0TTPs
–No CVE data
15malware
AdvancedProfile →
TEMP_HERETICChina
aka Operation EmailThief
UnclassifiedIdeology

TEMP_HERETIC is a China-attributed threat actor group with an ideological motive. It targets the Government, and Media and Entertainment sectors.

0TTPs
–No CVE data
0malware
AdvancedProfile →
Stately TaurusChina
UnclassifiedIdeology

Stately Taurus is a China-attributed threat actor group with an ideological motive.

0TTPs
–No CVE data
7malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.