Cyber threats / Threat actors

APT32

VN Suspected sponsor: Vietnam · ATT&CK G0050
3
APAC targets
78
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: APT 32, APT-32, APT-C-00, ATK17, BISMUTH, Canvas Cyclone, Cobalt Kitty, G0050, Ocean Buffalo, Ocean Lotus, OceanLotus, OceanLotus Group, POND LOACH, Sea Lotus, SeaLotus, TIN WOODLAWN

Cyber espionage actors, now designated by FireEye as APT32 (OceanLotus Group), are carrying out intrusions into private sector companies across multiple industries and have also targeted foreign governments, dissidents, and journalists. FireEye assesses that APT32 leverages a unique suite of fully-featured malware, in conjunction with commercially-available tools, to conduct targeted operations that are aligned with Vietnamese state interests.

ATT&CK techniques · 78
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Stealth
Defense Impairment
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
Targets
Elsewhere: Germany, United States
Sectors: Civil society, Dissidents, Government, Government, Administration, Journalist, Private sector
Relevance to the EU
EU relevance: High
Targets EU member states (Germany) as well as 3 Asia-Pacific countries
26 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
7
Infrastructure & Transport
4
Development Cooperation
4
Energy & Green Transition
2
Education & Skills
2
Digital & ICT
2
Climate & Environment
2
Peace & Security
1
Threats to the EU →
References
Sources: MISP, MITRE