APT40
BedrohungsakteurCNauch bekannt als
Weitere Namen und Kennungen dieser Entität.
ATT&CK
APT40 · BRONZE MOHAWK · Gadolinium · Gingham Typhoon · Kryptonite Panda · Leviathan · MUDCARP · TEMP.Jumper · TEMP.Periscope
MISP
APT40 · ATK29 · BRONZE MOHAWK · GADOLINIUM · Gingham Typhoon · ISLAND CASTLE · ISLANDDREAMS · ITG09 · KRYPTONITE PANDA · Leviathan · MUDCARP · Red Ladon · TA423 · TEMP.Jumper · TEMP.Periscope
Leviathan is an espionage actor targeting organizations and high-value targets in defense and government. Active since at least 2014, this actor has long-standing interest in maritime industries, naval defense contractors, and associated research institutions in the United States and Western Europe.
zugeordnete ATT&CK-Gruppen
Zugehörige Bedrohungsgruppen.
genutzte Techniken (50)
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
Kampagnen (1)
Kampagnen, die dies verwenden.
genutzte Software (17)
Zugehörige Malware und Tools.
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://www.proofpoint.com/us/threat-insight/post/leviathan-espionage-actor-spearphishes-maritime-and-defense-targets
- https://www.fireeye.com/blog/threat-research/2018/03/suspected-chinese-espionage-group-targeting-maritime-and-engineering-industries.html
- https://www.cfr.org/interactive/cyber-operations/apt-40
- https://www.fireeye.com/blog/threat-research/2019/03/apt40-examining-a-china-nexus-espionage-actor.html
- https://www.recordedfuture.com/chinese-threat-actor-tempperiscope/
- https://www.fireeye.com/blog/threat-research/2018/07/chinese-espionage-group-targets-cambodia-ahead-of-elections.html
- https://attack.mitre.org/groups/G0065/
- https://www.crowdstrike.com/resources/reports/2019-crowdstrike-global-threat-report/