Skip to content
Nation-state APTEspionageAdvanced sophistication · State-backed

Patchwork

Patchwork is an India-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 41 countries, including the United States and the United Kingdom. It uses 99 MITRE ATT&CK techniques and exploits 12 known CVEs.

Also known as
  • Hangover Group
  • Dropping Elephant
  • Chinastrats
  • MONSOON
  • Operation Hangover
  • Moonlight Tiger
  • APT-C-09
  • Quilted Tiger
  • Sarit
  • Viceroy Tiger
  • Neon
  • G0042
  • TG-4410
  • Zinc Emerson
  • ATK 11
  • Thirsty Gemini
  • Capricorn Organisation
  • Maha Grass
  • G0040
Origin
India
Techniques
99
Exploited CVEs
12
First seen
Jan 1, 2015
Last seen
May 11, 2020
Record updated

Who They Target.

Labelsespionage

About Patchwork.

Patchwork is a cyber espionage group that was first observed in December 2015. While the group has not been definitively attributed, circumstantial evidence suggests the group may be a pro-Indian or Indian entity.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.