CNChinaconfidence: 50G0019
NaikonNaikon
Also known as: PLA Unit 78020 · OVERRIDE PANDA · Camerashy · BRONZE GENEVA · G0019 · Naikon · BRONZE STERLING · G0013
Origin
CN
Known aliases
8
Target sectors
2
Attribution
State-sponsored
Profile
Kaspersky described Naikon in a 2015 report as: 'The Naikon group is mostly active in countries such as the Philippines, Malaysia, Cambodia, Indonesia, Vietnam, Myanmar, Singapore, and Nepal, hitting a variety of targets in a very opportunistic way.'
Aliases· 8
PLA Unit 78020OVERRIDE PANDACamerashyBRONZE GENEVANaikonBRONZE STERLING
Target sectors· 2
GovernmentPrivate sector
Known victims· 14
- India
- Saudi Arabia
- Vietnam
- Myanmar
- Singapore
- Thailand
- Malaysia
- Cambodia
- China
- Philippines
- South Korea
- United States
MITRE ATT&CK Group crosswalk
References
- https://securelist.com/analysis/publications/69953/the-naikon-apt/
- https://www.fireeye.com/blog/threat-research/2014/03/spear-phishing-the-news-cycle-apt-actors-leverage-interest-in-the-disappearance-of-malaysian-flight-mh-370.html
- https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07205555/TheNaikonAPT-MsnMM1.pdf
- https://usa.kaspersky.com/resource-center/threats/naikon-targeted-attacks
- https://web.archive.org/web/20210925164035/https://blog.trendmicro.com/trendlabs-security-intelligence/bkdr_rarstone-new-rat-to-watch-out-for/
- https://threatconnect.com/blog/tag/naikon/
- https://attack.mitre.org/groups/G0019/
- https://www.secureworks.com/research/threat-profiles/bronze-geneva
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.