G0050 APT32

Enterprise

also known asAPT32 · SeaLotus · OceanLotus · APT-C-00 · Canvas Cyclone · BISMUTH

APT32 is a suspected Vietnam-based threat group that has been active since at least 2014. The group has targeted multiple private sector industries as well as foreign governments, dissidents, and journalists with a strong focus on Southeast Asian countries like Vietnam, the Philippines, Laos, and Cambodia. They have extensively used strategic web compromises to compromise victims.

01

canonical actor

The group this is attributed to.

04

Detected by (Sigma) (1)

Sigma detection rules related to this.

05

source

Where this definition is published.