Naikon
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
Naikon
MISP
BRONZE GENEVA · BRONZE STERLING · Camerashy · NAIKON CASTLE · Naikon · OVERRIDE PANDA · PLA Unit 78020
Kaspersky described Naikon in a 2015 report as: 'The Naikon group is mostly active in countries such as the Philippines, Malaysia, Cambodia, Indonesia, Vietnam, Myanmar, Singapore, and Nepal, hitting a variety of targets in a very opportunistic way.'
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (14)
ATT&CK techniques this enables or maps to.
04
software used (15)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- https://securelist.com/analysis/publications/69953/the-naikon-apt/
- https://www.fireeye.com/blog/threat-research/2014/03/spear-phishing-the-news-cycle-apt-actors-leverage-interest-in-the-disappearance-of-malaysian-flight-mh-370.html
- https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07205555/TheNaikonAPT-MsnMM1.pdf
- https://usa.kaspersky.com/resource-center/threats/naikon-targeted-attacks
- https://web.archive.org/web/20210925164035/https://blog.trendmicro.com/trendlabs-security-intelligence/bkdr_rarstone-new-rat-to-watch-out-for/
- https://threatconnect.com/blog/tag/naikon/
- https://attack.mitre.org/groups/G0019/
- https://www.secureworks.com/research/threat-profiles/bronze-geneva