G0044 Winnti Group
Enterprisealso known asWinnti Group · Blackfly
Winnti Group is a threat group with Chinese origins that has been active since at least 2010. The group has heavily targeted the gaming industry, but it has also expanded the scope of its targeting. Some reporting suggests a number of other groups, including Axiom, APT17, and Ke3chang, are closely linked to Winnti Group.
01
canonical actor
The group this is attributed to.
02
techniques used (6)
ATT&CK techniques this enables or maps to.
03
software used (3)
Malware and tools associated with this.
04
Detected by (Sigma) (2)
Sigma detection rules related to this.
05
source
Where this definition is published.