G0131 Tonto Team
Enterprisealso known asTonto Team · Earth Akhlut · BRONZE HUNTLEY · CactusPete · Karma Panda
Tonto Team is a suspected Chinese state-sponsored cyber espionage threat group that has primarily targeted South Korea, Japan, Taiwan, and the United States since at least 2009; by 2020 they expanded operations to include other Asian as well as Eastern European countries. Tonto Team has targeted government, military, energy, mining, financial, education, healthcare, and technology organizations, including through the Heartbeat Campaign (2009-2012) and Operation Bitter Biscuit (2017).
01
canonical actor
The group this is attributed to.
02
techniques used (15)
ATT&CK techniques this enables or maps to.
03
software used (6)
Malware and tools associated with this.
04
source
Where this definition is published.