QUILTED TIGER
threat actorINalso known as
Other names and identifiers for this entity.
ATT&CK
Chinastrats · Dropping Elephant · Hangover Group · MONSOON · Operation Hangover · Patchwork
MISP
APT-C-09 · ATK11 · Chinastrats · Dropping Elephant · Monsoon · Orange Athos · Patchwork · QUILTED TIGER · Sarit · Thirsty Gemini · ZINC EMERSON
Dropping Elephant (also known as “Chinastrats” and “Patchwork“) is a relatively new threat actor that is targeting a variety of high profile diplomatic and economic targets using a custom set of attack tools. Its victims are all involved with China’s foreign relations in some way, and are generally caught through spear-phishing or watering hole attacks.
resolved ATT&CK groups
Threat groups associated with this.
techniques used (41)
ATT&CK techniques this enables or maps to.
software used (9)
Malware and tools associated with this.
references
External citations — patches, advisories, analysis.
- https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=09308982-77bd-41e0-8269-f2cc9ce3266e&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments
- https://www.forcepoint.com/blog/x-labs/monsoon-analysis-apt-campaign
- https://www.cymmetria.com/patchwork-targeted-attack/
- https://s3-us-west-2.amazonaws.com/cymmetria-blog/public/Unveiling_Patchwork.pdf
- https://www.volexity.com/blog/2018/06/07/patchwork-apt-group-targets-us-think-tanks/
- https://attack.mitre.org/groups/G0040/
- https://documents.trendmicro.com/assets/tech-brief-untangling-the-patchwork-cyberespionage-group.pdf
- https://securelist.com/the-dropping-elephant-actor/75328/