Introduction
Ke3chang is a threat group attributed to actors operating out of China. Ke3chang has targeted oil, government, diplomatic, military, and NGOs in Central and South America, the Caribbean, Europe, and North America since at least 2010. Mandiant Operation Ke3chang November 2014 NCC Group APT15 Alive and Strong APT15 Intezer June 2018 Microsoft NICKEL December 2021
Activities and Tactics
Targeted Sectors: Government, Administration, Government
Country of Origin: 🇨🇳 China
Incident Type: Espionage
Suspected Victims: European Union, India, United Kingdom, Germany
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
- China Chopper:
Attribution and Evidence
Country of Origin: China Additional attribution information pending cataloguing.
References
[1] MITRE ATT&CK MITRE ATT&CK entry [2] Mandiant Operation Ke3chang November 2014 [3] NCC Group APT15 Alive and Strong [4] APT15 Intezer June 2018 [5] Microsoft NICKEL December 2021