SlippyNunchucks
SlippyNunchucks is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Hospitality and Tourism sector in 6 countries, including Japan and Thailand. It uses 12 MITRE ATT&CK techniques and exploits 1 known CVE.
- Techniques
- 12
- Exploited CVEs
- 1
- First seen
- Sep 15, 2023
- Last seen
- Aug 8, 2026
- Record updated
Who They Target.
About SlippyNunchucks.
SlippyNunchucks is a China-aligned cyber espionage group that the reporting vendor assesses with high confidence to be associated with a nation-state surveillance effort aligned with the interests of the Chinese government. It mainly targets organizations and Chinese-speaking individuals in South and East Asia; victims of its 2026 operation were observed in Hong Kong, Thailand, Japan, Vietnam, Oman and Sri Lanka, and occasional victims were seen in Europe. Its targeting included significant surveillance of an organization operating Chinese-language online betting platforms, which the vendor links to Chinese restrictions on gambling and to an assessed pattern of China-aligned groups supporting law enforcement action against Chinese individuals tied to fraud schemes in the region.
The group has been active since at least 15 September 2023. The group operates the modular.NET DarkVigil toolset, also known as FDMTP, which communicates with its command-and-control servers over the Duplex Message Transport Protocol and has more than 20 known plugins.
Last updated Nov 5, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.