Profile
Also known as: APT-C-08, BITTER, Orange Yali, T-APT-17, TA397
The Bitter threat group initially started using RAT tools in their campaigns, as the first Bitter versions, for Android released in 2014 were based on the AndroRAT framework. Over time, they switched to a custom version that has been known as BitterRAT ever since.
ATT&CK techniques · 16
Resource Development
Initial Access
Execution
Privilege Escalation
Incidents attributed
- No incident in the register is attributed to this actor.
In the news
- No Asia-Pacific article names this actor yet.
Targets
Elsewhere: Germany
Relevance to the EU
EU relevance: Medium
Targets EU member states (Germany)
No EU cooperation projects recorded in its target countries.