Introduction
Microsoft threat actor profile. Origin/Threat: China.
Activities and Tactics
Country of Origin: 🇨🇳 China
Risk Level: High
First Seen: 2019
Last Activity: 2019
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No atomic indicators are listed in this profile. The APTnotes snapshot indexes 1 public reports that may contain IOCs; see Source Attribution for dataset links.
Malware and Tools
- Cobalt:
- QuickPulse:
- credential stealers such as WCE:
- GSECDUMP:
- COATHOOK:
- HTRAN:
- SOGU:
- TWOCHAINS:
- QUICKBALL:
Attribution and Evidence
Country of Origin: China Additional attribution information pending cataloguing.
References
References pending cataloguing.