G0018 admin@338
Enterprisealso known asadmin@338
admin@338 is a China-based cyber threat group. It has previously used newsworthy events as lures to deliver malware and has primarily targeted organizations involved in financial, economic, and trade policy, typically using publicly available RATs such as PoisonIvy, as well as some non-public backdoors.
01
canonical actor
The group this is attributed to.
02
techniques used (12)
ATT&CK techniques this enables or maps to.
03
software used (7)
Malware and tools associated with this.
04
source
Where this definition is published.