Cyber threats / Threat actors

APT17

CN Suspected sponsor: China · ATT&CK G0001
3
APAC targets
16
Techniques
0
Incidents
1
News · 30d
Profile
Also known as: AURORA PANDA, Axiom, BRONZE KEYSTONE, Deputy Dog, Dogfish, G0001, G0025, Group 72, Group 8, Heart Typhoon, HELIUM, Hidden Lynx, Tailgater Team

FireEye described APT17 in a 2015 report as: 'APT17, also known as DeputyDog, is a China based threat group that FireEye Intelligence has observed conducting network intrusions against U.S. government entities, the defense industry, law firms, information technology companies, mining companies, and non-government organizations.'

ATT&CK techniques · 16
Resource Development
Initial Access
Execution
Persistence
Defense Impairment
Credential Access
Lateral Movement
Collection
Command and Control
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news · last mention Nov 11
Targets
Elsewhere: Belgium, Switzerland, Germany, United Kingdom, Italy, Netherlands, Russia, United States
Sectors: Civil society, Defense, Government, Government, Administration, Intelligence, Justice, Mining, Private sector, Technology
Relevance to the EU
EU relevance: High
Targets EU member states (Belgium, Germany, Italy, Netherlands) as well as 3 Asia-Pacific countries
24 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
7
Research & Innovation
3
Development Cooperation
3
Climate & Environment
3
Infrastructure & Transport
2
Education & Skills
2
Peace & Security
1
Governance & Rule of Law
1
Threats to the EU →
References
Sources: MISP, MITRE