Skip to content
Threat actors by attributed origin

China-Attributed Threat Actors.

Brandefense tracks 193 threat actors attributed to China. The most documented are APT41, Mustang Panda and GhostEmperor. The sectors they target most are Government, Technology and Manufacturing.

72 of 193 published profiles shown

TGR-STA-1030China
aka UNC6619
UnclassifiedIdeology

TGR-STA-1030 is a China-attributed threat actor group with an ideological motive. It targets organisations in 14 countries, including India and France.

20TTPs
–No CVE data
23malware
AdvancedProfile →
APT18China
aka TG-0416 · Dynamite Panda · Threat Group-0416 +6
Nation-state APTEspionage

APT18 is a China-attributed nation-state APT group with an espionage motive.

18TTPs
1exploited
10malware
AdvancedProfile →
UNC4841China
aka SLIME57
Nation-state APTEspionage

UNC4841 is a China-attributed nation-state APT group with an espionage motive. It targets 4 sectors, including Government and Technology.

14TTPs
3exploited
9malware
AdvancedProfile →
BlackTechChina
aka Palmerworm · Circuit Panda · Radio Panda +10
Nation-state APTIdeology

BlackTech is a China-attributed nation-state APT group with an ideological motive.

16TTPs
1exploited
28malware
AdvancedProfile →
Space PiratesChina
aka Erudite Mogwai
Nation-state APTEspionage

Space Pirates is a China-attributed nation-state APT group with an espionage motive.

16TTPs
–No CVE data
30malware
AdvancedProfile →
PLATINUMChina
aka TwoForOne · ATK 33 · G0068 +1
Nation-state APTEspionage

PLATINUM is a China-attributed nation-state APT group with an espionage motive.

11TTPs
5exploited
6malware
AdvancedProfile →
Autumn DragonChina
Nation-state APTIdeology

Autumn Dragon is a China-attributed nation-state APT group with an ideological motive. It targets 6 sectors, including Government, and Transportation and Logistics.

16TTPs
–No CVE data
0malware
AdvancedProfile →
Flax TyphoonChina
aka Ethereal Panda · RedJuliett
Nation-state APTEspionage

Flax Typhoon is a China-attributed nation-state APT group with an espionage motive.

15TTPs
–No CVE data
14malware
AdvancedProfile →
Liminal PandaChina
Nation-state APTEspionage

Liminal Panda is a China-attributed nation-state APT group with an espionage motive. It targets 3 sectors, including Technology, and Defense and Aerospace.

13TTPs
–No CVE data
17malware
AdvancedProfile →
TA459China
aka G0062
Nation-state APTEspionage

TA459 is a China-attributed nation-state APT group with an espionage motive.

11TTPs
2exploited
7malware
ExpertProfile →
Earth KurmaChina
UnclassifiedIdeology

Earth Kurma is a China-attributed threat actor group with an ideological motive.

13TTPs
–No CVE data
13malware
AdvancedProfile →
SuckflyChina
aka APT22 · BRONZE OLIVE · Group 46 +3
Nation-state APTEspionage

Suckfly is a China-attributed nation-state APT group with an espionage motive.

5TTPs
7exploited
21malware
AdvancedProfile →
Earth LamiaChina
Nation-state APTEspionage

Earth Lamia is a China-attributed nation-state APT group with an espionage motive.

12TTPs
–No CVE data
10malware
Not ratedProfile →
Deep PandaChina
aka Shell Crew · WebMasters · KungFu Kittens +8
Nation-state APTEspionage

Deep Panda is a China-attributed nation-state APT group with an espionage motive.

11TTPs
–No CVE data
15malware
AdvancedProfile →
APT16China
aka SVCMONDR · G0023
Nation-state APTIdeology

APT16 is a China-attributed nation-state APT group with an ideological motive.

7TTPs
3exploited
3malware
ExpertProfile →
Earth BaxiaChina
Nation-state APTEspionage

Earth Baxia is a China-attributed nation-state APT group with an espionage motive.

9TTPs
1exploited
3malware
AdvancedProfile →
GelsemiumChina
aka Operation “TooHash” · Operation “NightScout”
Nation-state APTEspionage

Gelsemium is a China-attributed nation-state APT group with an espionage motive.

6TTPs
3exploited
17malware
AdvancedProfile →
DragonOKChina
aka Bronze Overbrook · Shallow Taurus · G0017
Nation-state APTEspionage

DragonOK is a China-attributed nation-state APT group with an espionage motive.

7TTPs
2exploited
11malware
AdvancedProfile →
RedEchoChina
aka G1042
Nation-state APTEspionage

RedEcho is a China-attributed nation-state APT group with an espionage motive.

5TTPs
4exploited
2malware
IntermediateProfile →
Red HeronChina
UnclassifiedIdeology

Red Heron is a China-attributed threat actor group with an ideological motive.

8TTPs
–No CVE data
2malware
AdvancedProfile →
Chinese State-Sponsored APTsChina
UnclassifiedIdeology

Chinese State-Sponsored APTs is a China-attributed threat actor group with an ideological motive.

8TTPs
–No CVE data
5malware
AdvancedProfile →
UAT-11587China
Nation-state APTEspionage

UAT-11587 is a China-attributed nation-state APT group with an espionage motive.

8TTPs
–No CVE data
1malware
AdvancedProfile →
APT20China
aka Violin Panda · Crawling Taurus · TH3Bug +1
Nation-state APTEspionage

APT20 is a China-attributed nation-state APT group with an espionage motive.

7TTPs
–No CVE data
1malware
AdvancedProfile →
Storm-3069China
UnclassifiedIdeology

Storm-3069 is a China-attributed threat actor group with an ideological motive. It targets 5 sectors, including Government and Healthcare.

7TTPs
–No CVE data
2malware
AdvancedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.