Introduction
Sodium is reportedly a “sophisticated Chinese state-affiliated” threat actor group, which has especially targeted defense, government, and high-tech organizations in the United States.[GitHub cybershujin Threat-Actors-use-of-Artifical-Intelligence]
Activities and Tactics
Targeted Sectors: Private sector, Military
Country of Origin: 🇨🇳 China
Risk Level: High
Incident Type: Espionage
Suspected Victims: United States, United Kingdom, Hong Kong
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
- China Chopper:
- CyberGate:
- Cyber Eye RAT:
- UNITEDRAKE:
Attribution and Evidence
Country of Origin: China Additional attribution information pending cataloguing.
References
[1] [GitHub cybershujin Threat-Actors-use-of-Artifical-Intelligence