Skip to content
Threat actors by attributed origin

China-Attributed Threat Actors.

Brandefense tracks 223 threat actors attributed to China. The most documented are GhostEmperor, APT41 and Mustang Panda. The sectors they target most are Government, Technology and Telecommunications.

144 of 223 published profiles shown

Earth LongzhiChina
UnclassifiedIdeology

Earth Longzhi is a China-attributed threat actor group with an ideological motive. It uses 1 MITRE ATT&CK technique.

1TTPs
–No CVE data
6malware
AdvancedProfile →
TA428China
UnclassifiedIdeology

TA428 is a China-attributed threat actor group with an ideological motive. It targets the Government sector in 5 countries, including Russia and Ukraine.

0TTPs
–No CVE data
15malware
AdvancedProfile →
CalypsoChina
aka Bronze Medley
Nation-state APTEspionage

Calypso is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in 11 countries, including India and Brazil.

0TTPs
–No CVE data
19malware
Not ratedProfile →
TEMP_HERETICChina
aka Operation EmailThief
UnclassifiedIdeology

TEMP_HERETIC is a China-attributed threat actor group with an ideological motive. It targets the Government, and Media and Entertainment sectors.

0TTPs
–No CVE data
0malware
AdvancedProfile →
SharpPandaChina
aka Sharp Dragon
Nation-state APTEspionage

SharpPanda is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in 4 countries, including Indonesia and Thailand.

0TTPs
–No CVE data
3malware
Not ratedProfile →
Shadow NetworkChina
Nation-state APTEspionage

Shadow Network is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
1malware
Not ratedProfile →
PassCVChina
Nation-state APTEspionage

PassCV is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 5 countries, including the United States and China.

0TTPs
–No CVE data
9malware
Not ratedProfile →
SafeChina
Nation-state APTEspionage

Safe is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
6malware
Not ratedProfile →
ChamelGangChina
aka CamoFei
Nation-state APTEspionage

ChamelGang is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
8malware
ModerateProfile →
TA530China
CybercrimeFinancial

TA530 is a China-attributed cybercrime syndicate with a financial motive.

0TTPs
–No CVE data
10malware
Not ratedProfile →
TaskMastersChina
Nation-state APTEspionage

TaskMasters is a China-attributed nation-state APT group with an espionage motive. It targets 6 sectors, including Government and Manufacturing, in Russia.

0TTPs
–No CVE data
17malware
Not ratedProfile →
GhostNetChina
aka Snooping Dragon
Nation-state APTEspionage

GhostNet is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
3malware
Not ratedProfile →
TA413China
aka White Dev 9
Nation-state APTEspionage

TA413 is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
3malware
Not ratedProfile →
Twisted PandaChina
Nation-state APTEspionage

Twisted Panda is a China-attributed nation-state APT group with an espionage motive. It targets the Defense and Aerospace sector in Russia and Belarus.

0TTPs
–No CVE data
1malware
Not ratedProfile →
BRONZE EDGEWOODChina
aka Red Hariasa · TAG-16
Nation-state APTEspionage

BRONZE EDGEWOOD is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in 7 countries, including Indonesia and Taiwan.

0TTPs
–No CVE data
13malware
Not ratedProfile →
SparklingGoblinChina
UnclassifiedIdeology

SparklingGoblin is a China-attributed threat actor group with an ideological motive.

0TTPs
–No CVE data
2malware
AdvancedProfile →
BRONZE SPRINGChina
aka UNC302
UnclassifiedUnknown

BRONZE SPRING is a China-attributed threat actor group.

0TTPs
–No CVE data
1malware
Not ratedProfile →
POISON CARPChina
aka Evil Eye · Red Dev 16 · Earth Empusa +2
Nation-state APTEspionage

POISON CARP is a China-attributed nation-state APT group with an espionage motive. It targets organisations in 7 countries, including the United States and Canada.

0TTPs
–No CVE data
12malware
Not ratedProfile →
Moshen DragonChina
aka Nomad Panda · TEMP.Trident
Nation-state APTEspionage

Moshen Dragon is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
8malware
Not ratedProfile →
HellsingChina
UnclassifiedUnknown

Hellsing is a China-attributed threat actor group. It targets 3 sectors, including Government and Manufacturing, in 5 countries, including the United States and India.

0TTPs
–No CVE data
1malware
Not ratedProfile →
GambleForceChina
Nation-state APTEspionage

GambleForce is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
4malware
Not ratedProfile →
GraylingChina
Nation-state APTEspionage

Grayling is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
4malware
Not ratedProfile →
MikroceenChina
aka SixLittleMonkeys
Nation-state APTEspionage

Mikroceen is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
7malware
Not ratedProfile →
Unfading Sea HazeChina
Nation-state APTEspionage

Unfading Sea Haze is a China-attributed nation-state APT group with an espionage motive. It targets the Government, and Defense and Aerospace sectors.

0TTPs
–No CVE data
12malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.