APT27

    ChinaState-sponsoredUnknown

    Observation period

    57

    Techniques

    0

    Reports

    Latest observed activity
    No dated reports available
    First observed
    —

    Profile

    A China-based actor that targets foreign embassies to collect data on government, defence, and technology sectors.

    Relevance for Germany, Austria and Switzerland

    medium

    Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).

    Target sectors according to source

    • Government
    • Private sector

    Target countries according to source United States, United Kingdom, France, Japan, Taiwan, India, Canada, China, Thailand, Israel, Australia, South Korea, Russia, Iran, Turkey

    Aliases

    • GreedyTaotie
    • TG-3390
    • EMISSARY PANDA
    • TEMP.Hippo
    • Red Phoenix
    • Budworm
    • Group 35
    • ZipToken
    • Iron Tiger
    • BRONZE UNION
    • Lucky Mouse
    • Iron Taurus
    • Earth Smilodon
    • Circle Typhoon
    • Linen Typhoon
    • SHORE CASTLE

    MITRE ATT&CK techniques

    Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.

    Software / tooling used

    External references

    Back to group overview