Velvet Ant
Velvet Ant is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 3 sectors, including Technology and Manufacturing, in China. It uses 48 MITRE ATT&CK techniques and exploits 2 known CVEs.
- Origin
- China
- Techniques
- 48
- Exploited CVEs
- 2
- First seen
- Jan 1, 2021
- Last seen
- Jul 1, 2024
- Record updated
Who They Target.
Sectors · 3
Countries · 1
Labelsespionageglobal
About Velvet Ant.
Velvet Ant is a threat actor operating since at least 2021. Velvet Ant is associated with complex persistence mechanisms, the targeting of network devices and appliances during operations, and the use of zero day exploits.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.