CNChinaconfidence: 50G0001G0025
APT17APT17
Also known as: Group 8 · AURORA PANDA · Hidden Lynx · Tailgater Team · Dogfish · BRONZE KEYSTONE · G0025 · Group 72 · G0001 · Axiom · HELIUM · Heart Typhoon · APT17
Origin
CN
Known aliases
13
Target sectors
3
Attribution
State-sponsored
Profile
FireEye described APT17 in a 2015 report as: 'APT17, also known as DeputyDog, is a China based threat group that FireEye Intelligence has observed conducting network intrusions against U.S. government entities, the defense industry, law firms, information technology companies, mining companies, and non-government organizations.'
Aliases· 13
Group 8AURORA PANDAHidden LynxTailgater TeamDogfishBRONZE KEYSTONEGroup 72AxiomHELIUMHeart TyphoonAPT17
Target sectors· 3
GovernmentPrivate sectorCivil society
Known victims· 11
- United States
- Netherlands
- Italy
- Japan
- United Kingdom
- Belgium
- Russia
- Indonesia
- Germany
- Switzerland
- China
MITRE ATT&CK Group crosswalk
References
- https://web.archive.org/web/20130924130243/https://www.fireeye.com/blog/technical/cyber-exploits/2013/09/operation-deputydog-zero-day-cve-2013-3893-attack-against-japanese-targets.html
- https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2013/hidden_lynx.pdf
- https://www.cfr.org/interactive/cyber-operations/apt-17
- https://www.carbonblack.com/2013/02/08/bit9-and-our-customers-security/
- https://web.archive.org/web/20141016080249/http://www.symantec.com/connect/blogs/security-vendors-take-action-against-hidden-lynx-malware
- https://web.archive.org/web/20130920000343/https://www.symantec.com/connect/blogs/hidden-lynx-professional-hackers-hire
- https://www.recordedfuture.com/hidden-lynx-analysis/
- https://www.secureworks.com/research/threat-profiles/bronze-keystone
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.