UnclassifiedIdeologyAdvanced sophistication
TA428
TA428 is a China-attributed threat actor group with an ideological motive, tracked by Brandefense. It targets the Government sector in 5 countries, including Russia and Ukraine.
- Origin
- China
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Aug 9, 2022
- Last seen
- Sep 8, 2022
- Record updated
Who They Target.
Sectors · 1
Countries · 5
About TA428.
An APT group known for targeting defense industry organizations and public institutions, particularly in Eastern Europe and Afghanistan. They employ custom phishing, exploit known vulnerabilities, and use various backdoors and tools for lateral movement and data exfiltration.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.