Introduction
This threat actor uses spear-phishing techniques to compromise diplomatic targets in Southeast Asia, India, and the United States. It also seems to have targeted the APT 30. Possibly uses the same infrastructure as Mirage
Activities and Tactics
Targeted Sectors: Infrastructure, Diplomacy, Government
Country of Origin: 🇨🇳 China
Risk Level: High
First Seen: 2015
Last Activity: 2015
Incident Type: Espionage
Suspected Victims: Malaysia, Indonesia, Philippines, United States, India
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No atomic indicators are listed in this profile. The APTnotes snapshot indexes 2 public reports that may contain IOCs; see Source Attribution for dataset links.
Malware and Tools
- UNITEDRAKE
Attribution and Evidence
Country of Origin: China Additional attribution information pending cataloguing.
References
References pending cataloguing.