CNUnknownconfidence: 50
APT27APT27
Also known as: GreedyTaotie · TG-3390 · EMISSARY PANDA · TEMP.Hippo · Red Phoenix · Budworm · Group 35 · ZipToken · Iron Tiger · BRONZE UNION · Lucky Mouse · G0027 · Iron Taurus · Earth Smilodon · Circle Typhoon · Linen Typhoon · APT27
Origin
CN
Known aliases
17
Target sectors
2
Attribution
State-sponsored
Profile
APT27 is a Chinese-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as GreedyTaotie, TG-3390, EMISSARY PANDA (and 13 more). Operational targeting focuses on the Government and Private sector sectors. Documented victim organisations include United States, United Kingdom, France and 12 other named victims. Original record: A China-based actor that targets foreign embassies to collect data on government, defence, and technology sectors.
Aliases· 17
GreedyTaotieTG-3390EMISSARY PANDATEMP.HippoRed PhoenixBudwormGroup 35ZipTokenIron TigerBRONZE UNIONLucky MouseIron TaurusEarth SmilodonCircle TyphoonLinen TyphoonAPT27
Target sectors· 2
GovernmentPrivate sector
Known victims· 15
- United States
- United Kingdom
- France
- Japan
- Taiwan
- India
- Canada
- China
- Thailand
- Israel
- Australia
- South Korea
References
- https://i.blackhat.com/Asia-22/Friday-Materials/AS-22-Li-To-Loot-Or-Not-To-Loot-That-Is-Not-a-Question.pdf
- https://web.archive.org/web/20140129192702/https://www.scmagazineuk.com/iran-and-russia-blamed-for-state-sponsored-espionage/article/330401/
- https://labs.bitdefender.com/2018/02/operation-pzchao-a-possible-return-of-the-iron-tiger-apt/
- https://www.bitdefender.com/files/News/CaseStudies/study/185/Bitdefender-Business-2017-WhitePaper-PZCHAO-crea2452-en-EN-GenericUse.pdf
- https://www.cfr.org/interactive/cyber-operations/iron-tiger
- https://www.bleepingcomputer.com/news/security/chinese-cyber-espionage-group-hacked-government-data-center/
- https://www.secureworks.com/research/bronze-union
- http://newsroom.trendmicro.com/blog/operation-iron-tiger-attackers-shift-east-asia-united-states
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.