APT27
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
APT27 · BRONZE UNION · Earth Smilodon · Emissary Panda · Iron Tiger · Linen Typhoon · LuckyMouse · TG-3390 · Threat Group-3390
MISP
APT27 · BRONZE UNION · Budworm · Circle Typhoon · EMISSARY PANDA · Earth Smilodon · GreedyTaotie · Group 35 · Iron Taurus · Iron Tiger · Linen Typhoon · Lucky Mouse · Red Phoenix · SHORE CASTLE · TEMP.Hippo · TG-3390 · ZipToken
A China-based actor that targets foreign embassies to collect data on government, defence, and technology sectors.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (57)
ATT&CK techniques this enables or maps to.
showing 20 of 57
04
software used (24)
Malware and tools associated with this.
showing 20 of 24
05
references
External citations — patches, advisories, analysis.
- https://i.blackhat.com/Asia-22/Friday-Materials/AS-22-Li-To-Loot-Or-Not-To-Loot-That-Is-Not-a-Question.pdf
- https://web.archive.org/web/20140129192702/https://www.scmagazineuk.com/iran-and-russia-blamed-for-state-sponsored-espionage/article/330401/
- https://labs.bitdefender.com/2018/02/operation-pzchao-a-possible-return-of-the-iron-tiger-apt/
- https://www.bitdefender.com/files/News/CaseStudies/study/185/Bitdefender-Business-2017-WhitePaper-PZCHAO-crea2452-en-EN-GenericUse.pdf
- https://www.cfr.org/interactive/cyber-operations/iron-tiger
- https://www.bleepingcomputer.com/news/security/chinese-cyber-espionage-group-hacked-government-data-center/
- https://www.secureworks.com/research/bronze-union
- http://newsroom.trendmicro.com/blog/operation-iron-tiger-attackers-shift-east-asia-united-states