APT3
Observation period
44
Techniques
0
Reports
- Latest observed activity
- No dated reports available
- First observed
- —
Profile
Symantec described UPS in 2016 report as: 'Buckeye (also known as APT3, Gothic Panda, UPS Team, and TG-0110) is a cyberespionage group that is believed to have been operating for well over half a decade. Traditionally, the group attacked organizations in the US as well as other targets. However, Buckeyes focus appears to have changed as of June 2015, when the group began compromising political entities in Hong Kong.'
Relevance for Germany, Austria and Switzerland
medium
Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).
Target sectors according to source
- Private sector
Target countries according to source United States, United Kingdom, Hong Kong
Aliases
- GOTHIC PANDA
- TG-0110
- Group 6
- UPS
- Buckeye
- Boyusec
- BORON
- BRONZE MAYFAIR
- Red Sylvan
- Brocade Typhoon
MITRE ATT&CK techniques
Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.
- T1053.005
- T1104
- T1110.002
- T1564.003
- T1555.003
- T1059.003
- T1016
- T1049
- T1090.002
- T1218.011
- T1027
- T1566.002
- T1098.007
- T1204.001
- T1041
- T1552.001
- T1074.001
- T1078.002
- T1005
- T1203
- T1021.002
- T1574.001
- T1087.001
- T1070.004
- T1083
- T1546.008
- T1560.001
- T1082
- T1059.001
- T1543.003
- T1003.001
- T1547.001
- T1021.001
- T1057
- T1095
- T1069
- T1018
- T1056.001
- T1036.010
- T1027.002
- T1136.001
- T1105
- T1033
- T1027.005