Winnti
Winnti is a China-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 17 sectors, including Government and Technology, in 36 countries, including the United States and the United Kingdom. It uses 50 MITRE ATT&CK techniques and exploits 15 known CVEs.
Also known as
- Blackfly
- Winnti Umbrella
- Winnti Group
- Origin
- China
- Techniques
- 50
- Exploited CVEs
- 15
- Record updated
Who They Target.
Sectors · 17
Countries · 36
About Winnti.
A Chinese threat group associated with infrastructure and tools used in Operation Diplomatic Specter.
Last updated Aug 14, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.