TeamTNT
TeamTNT is a China-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 6 sectors, including Government and Technology, in 6 countries, including Australia and China. It uses 51 MITRE ATT&CK techniques and exploits 4 known CVEs.
Also known as
- (not Set)
- Aoqin Dragon
- UNC94
- G1007
- Origin
- China
- Techniques
- 51
- Exploited CVEs
- 4
- First seen
- Jan 1, 2019
- Last seen
- Apr 21, 2022
- Record updated
Who They Target.
Sectors · 6
Labelsbdef-qf:latestespionageglobal
About TeamTNT.
TeamTNT is a threat group that has primarily targeted cloud and containerized environments. The group as been active since at least October 2019 and has mainly focused its efforts on leveraging cloud and container resources to deploy cryptocurrency miners in victim environments.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.