Free scan↗
  • English
  • Deutsch

Confucius

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Confucius · Confucius APT

02

resolved ATT&CK groups

Threat groups associated with this.

  • G0142Confucius
03

techniques used (19)

ATT&CK techniques this enables or maps to.

  • T1041Exfiltration Over C2 Channel
  • T1053.005Scheduled Task
  • T1059.001PowerShell
  • T1059.005Visual Basic
  • T1071.001Web Protocols
  • T1083File and Directory Discovery
  • T1105Ingress Tool Transfer
  • T1119Automated Collection
  • T1203Exploitation for Client Execution
  • T1204.001Malicious Link
  • T1204.002Malicious File
  • T1218.005Mshta
  • T1221Template Injection
  • T1547.001Registry Run Keys / Startup Folder
  • T1566.001Spearphishing Attachment
  • T1566.002Spearphishing Link
  • T1567.002Exfiltration to Cloud Storage
  • T1583.006Web Services
  • T1680Local Storage Discovery
04

software used (3)

Malware and tools associated with this.

  • S1077Hornbill
  • S1082Sunbird
  • S0670WarzoneRAT
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…