Profile
Also known as: 狼毒草
The Gelsemium group has been active since at least 2014 and was described in the past by a few security companies. Gelsemium’s name comes from one possible translation ESET found while reading a report from VenusTech who dubbed the group 狼毒草 for the first time. It’s the name of a genus of flowering plants belonging to the family Gelsemiaceae, Gelsemium elegans is the species that contains toxic compounds like Gelsemine, Gelsenicine and Gelsevirine, which ESET choses as names for the three components of this malware family.
ATT&CK techniques
MITRE ATT&CK has no technique mapping for this actor.
Incidents attributed
- No incident in the register is attributed to this actor.
In the news
- No Asia-Pacific article names this actor yet.
Targets
China
Japan
North Korea
South Korea
MongoliaElsewhere: Egypt, Israel, Iraq, Iran, Jordan, Kuwait, Lebanon, Oman, Saudi Arabia, Syria, Türkiye, Yemen
Sectors: Electronics Manufacturers, Government, Religious organization, Universities
Relevance to the EU
EU relevance: Medium
Targets electronics manufacturers in China, where the EU has Trade & Investment projects; 13 more such overlaps
24 EU cooperation projects in the Asia-Pacific countries this actor targets: