Cyber threats / Threat actors

Grayling

CN Suspected sponsor: China
2
APAC targets
0
Techniques
0
Incidents
0
News · 30d
Profile

Grayling activity was first observed in early 2023, when a number of victims were identified with distinctive malicious DLL side-loading activity. Grayling appears to target organisations in Asia, however one unknown organisation in the United States was also targeted. Industries targeted include Biomedical, Government and Information Technology. Grayling use a variety of tools during their attacks, including well known tools such as Cobalt Strike and Havoc and also some others.

ATT&CK techniques
MITRE ATT&CK has no technique mapping for this actor.
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
  • No Asia-Pacific article names this actor yet.
Targets
Elsewhere: Solomon Islands, United States
Sectors: Biomedical, Government, Information technology
Relevance to the EU
EU relevance: Medium
Targets information technology in Taiwan, where the EU has Digital & ICT projects; 1 more such overlap
23 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
4
Infrastructure & Transport
4
Energy & Green Transition
3
Development Cooperation
3
Education & Skills
2
Digital & ICT
2
Climate & Environment
2
Peace & Security
1
Threats to the EU →
References
Sources: MISP