Introduction
APT16 is a China-based threat group that has launched spearphishing campaigns targeting Japanese and Taiwanese organizations. FireEye EPS Awakens Part 2
Activities and Tactics
Targeted Sectors: Private sector
Country of Origin: 🇨🇳 China
Risk Level: High
Incident Type: Espionage
Suspected Victims: Japan, Taiwan
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
ATT&CK technique IDs (denormalized)
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
- Backdoor.Oldrea
- China Chopper
- ELMER
- Windows Remote Desktop
- Xploit
- ELMER backdoor:
- Gh0st:
- HTRAN:
- UNICAT:
- Poison Ivy:
- Pandora:
- CVE-2015-2545:
MITRE ATT&CK Software
Attribution and Evidence
Country of Origin: China Additional attribution information pending cataloguing.
References
[1] mitre-attack [3] FireEye EPS Awakens Part 2 Winters, R. (2015, December 20). The EPS Awakens - Part 2. Retrieved January 22, 2016.