APT1
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
APT1 · Comment Crew · Comment Group · Comment Panda
MISP
APT1 · Brown Fox · Byzantine Candor · COMMENT PANDA · Comment Crew · Comment Group · GIF89a · Group 3 · PLA Unit 61398 · ShadyRAT · TG-8223
PLA Unit 61398 (Chinese: 61398部队, Pinyin: 61398 bùduì) is the Military Unit Cover Designator (MUCD)[1] of a People's Liberation Army advanced persistent threat unit that has been alleged to be a source of Chinese computer hacking attacks
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (23)
ATT&CK techniques this enables or maps to.
showing 20 of 23
04
software used (17)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- https://en.wikipedia.org/wiki/PLA_Unit_61398
- http://intelreport.mandiant.com/Mandiant_APT1_Report.pdf
- https://www.cfr.org/interactive/cyber-operations/pla-unit-61398
- https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf
- https://blog.trendmicro.com/trendlabs-security-intelligence/the-siesta-campaign-a-new-targeted-attack-awakens/
- https://www.fireeye.com/blog/threat-research/2014/03/a-detailed-examination-of-the-siesta-campaign.html
- https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/operation-oceansalt-delivers-wave-after-wave/
- https://www.mcafee.com/enterprise/en-us/assets/reports/rp-operation-oceansalt.pdf