Cyber threats / Threat actors

GALLIUM

CN Suspected sponsor: China · ATT&CK G0093
0
APAC targets
31
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: Alloy Taurus, Granite Typhoon, PHANTOM PANDA, Red Dev 4

GALLIUM, is a threat actor believed to be targeting telecommunication providers over the world, mostly South-East Asia, Europe and Africa. To compromise targeted networks, GALLIUM target unpatched internet-facing services using publicly available exploits and have been known to target vulnerabilities in WildFly/JBoss.

ATT&CK techniques · 31
Resource Development
Initial Access
Execution
Persistence
Stealth
Defense Impairment
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
  • No Asia-Pacific article names this actor yet.
Targets
No victim countries in the sources.
Relevance to the EU
EU relevance: Low
No EU member state among its known victims and no overlap with EU projects
No EU cooperation projects recorded in its target countries.
References
Sources: MISP, MITRE