APT40

    ChinaState-sponsoredUnknown

    Observation period

    50

    Techniques

    0

    Reports

    Latest observed activity
    No dated reports available
    First observed
    —

    Profile

    Leviathan is an espionage actor targeting organizations and high-value targets in defense and government. Active since at least 2014, this actor has long-standing interest in maritime industries, naval defense contractors, and associated research institutions in the United States and Western Europe.

    Relevance for Germany, Austria and Switzerland

    high

    Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).

    Target sectors according to source

    • Government
    • Private sector

    Target countries according to source United States, Hong Kong, The Philippines, Asia Pacific Economic Cooperation, Cambodia, Belgium, Germany, Philippines, Malaysia, Norway, Saudi Arabia, Switzerland, United Kingdom

    Aliases

    • TEMP.Periscope
    • TEMP.Jumper
    • Leviathan
    • BRONZE MOHAWK
    • GADOLINIUM
    • KRYPTONITE PANDA
    • ATK29
    • TA423
    • Red Ladon
    • ITG09
    • MUDCARP
    • ISLANDDREAMS
    • Gingham Typhoon
    • ISLAND CASTLE

    MITRE ATT&CK techniques

    Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.

    Software / tooling used

    ATT&CK campaigns

    Linked ATT&CK campaign profiles in which this group is named as an actor.

    External references

    Back to group overview