Sunshop Digital Quartermaster
Sunshop Digital Quartermaster is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets 6 sectors, including Government and Finance. It uses 7 MITRE ATT&CK techniques.
Also known as
- SDQ
- Techniques
- 7
- Exploited CVEs
- No CVE data
- First seen
- Sep 26, 2014
- Last seen
- Sep 26, 2014
- Record updated
Who They Target.
How They Operate · MITRE ATT&CK.
7 techniques across 3 of 14 tacticsReconnaissance1
T1071.001
Application Layer Protocol: Web Protocols
Application Layer Protocol: Web Protocols
Resource Development·
Initial Access3
T1189
Drive-by Compromise
Drive-by Compromise
T1203
Exploitation for Client Execution
Exploitation for Client Execution
T1566.001
Phishing: Spearphishing Attachment
Phishing: Spearphishing Attachment
Execution·
Persistence·
Privilege Escalation·
Defense Evasion3
T1027
Obfuscated Files or Information
Obfuscated Files or Information
T1036.005
Masquerading: Match Legitimate Resource Name or Location
Masquerading: Match Legitimate Resource Name or Location
T1553.002
Subvert Trust Controls: Code Signing
Subvert Trust Controls: Code Signing
Credential Access·
Discovery·
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Impact·
Indicators Of Compromise.
TLP:AMBER133 indicators on the Brandefense platform
IP, domain and hash indicators · YARA rules · ATT&CK Navigator export
Request A DemoAbout Sunshop Digital Quartermaster.
A collective of malware authors and builders that provides tools, exploits, and implants to multiple China-based advanced persistent threat (APT) operational groups.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.