🛡️
./Malfav.asm
Linkedin
  • 👋./Malfav.asm
    • 🕸️Malfav Agenda
  • 🕷️Malware Introduction
    • 💡What is Malware
      • 🌠FIN Malware
      • 🦘Cyber Gang Malware
        • 🕷️Spiders Malware
      • 🕵️‍♀️Cyber Espionage Malware
      • 🍘Cyber Sabotage Malware
      • 🛴Rootkit
        • 🫚Bootkit
    • 🦫Nations State APT
      • 🗯️APT
      • 🇮🇷Iran APT
      • 🇷🇺Russian APT
      • 🇨🇳Chines APT
      • 🇮🇳India APT
      • 🇵🇰Pakistan APT
      • 🇻🇳Vietnamese APT
      • 🇰🇵North Korean APT
    • 🥋Mobile Malware
      • 📲Android Malware
        • 💰Commerical Android Malware
          • Common Android Spyware
        • 🧧Common Android Exploits
          • 0️Common Android 0day
      • 📱IPHONE Malware
        • 🐚Common IPHONE Spyware
        • 💥Commerical IPHONE Malware
        • 💣Common IPHONE Exploits
    • 📃Malicious Documents
      • 📨Excel Spreadsheets
      • 🗼PowerPoint Presentations
      • 🤺Microsoft Office Documents
      • 📑PDF
      • 📄Other Document Formats
      • 🩼Common Techniques Used in Malicious Documents
    • 🏞️Advanced Persistence Threat - APT
      • 🥠APT Groups
        • 🇨🇳Mustang Panda
        • 🛕Mustard Tempest
        • 🇨🇳Naikon
        • 🪡NEODYMIUM
        • 🇷🇺Nomadic Octopus
        • 🇮🇷OilRig
        • 🍊Orangeworm
        • 🇮🇳Patchwork
        • 🇨🇳PittyTiger
        • 🌏PLATINUM
        • 🇱🇧POLONIUM
        • 🇵🇹Poseidon Group
        • 🇹🇲PROMETHIUM
        • 🇨🇳Putter Panda
        • 🦝Rancor
        • 🇨🇳Rocke
        • 🐢RTM
        • 🇷🇺Sandworm Team
        • 🃏Scarlet Mimic
        • 🇬🇱Scattered Spider
        • 🇵🇰SideCopy
        • 🇮🇳Sidewinder
        • 🔕Silence
        • 🇮🇷Silent Librarian
        • 🇳🇬SilverTerrier
        • 🐞Sowbug
        • 🔱Strider
        • 🇨🇳Suckfly
        • 🥃TA2541
        • 🇨🇳TA459
        • 💼TA505
        • 💰TA551
        • ☁️TeamTNT
        • 🇷🇺TEMP.Veles
        • 🦳The White Company
        • 💳Threat Group-1314
        • 🫓Threat Group-3390
        • 🇨🇳Threat Group-3390
        • 🦐Thrip
        • 🐈ToddyCat
        • 🐙Tonto Team
        • 🇵🇰Transparent Tribe
        • 🐠Tropic Trooper
        • 🐢Turla
        • 🇮🇷UNC788
        • 🇱🇧Volatile Cedar
        • 🇨🇳Volt Typhoon
        • 🕊️Whitefly
        • 🔘Windigo
        • 🪽Windshift
        • 🇨🇳Winnti Group
        • 🥀WIRTE
        • 🇷🇺Wizard Spider
        • 🎪ZIRCONIUM
      • 🏹APT's Software
        • 🐀3PARA RAT
        • 🐀4H RAT
        • ⚱️AADInternals
        • 🔻ABK
        • ⚗️AbstractEmu
        • 🪱ACAD/Medre.A
        • 🇲🇰AcidRain
        • 🐬Action RAT
  • 🐁OS Internal's
    • 🍩Suspicious API's
      • 🪨Process Information API's
      • 🧩Registry API's
      • 🔒Encryption API's
      • 📯Restore Point API's
      • 👾Exfiltration API's
      • 🦉Data Wiping API's
      • 📨Shadow Copy API's
      • 🪼What is Malicious API's Functions
      • 🌪️System Information API's
      • 🌀Network Information API's
  • 🪟Windows Internal
    • 📡Windows Internal
      • 🦐Why Windows Internal ?
        • 🏵️Process
        • 🧵Thread
        • 🪭Handle
        • 🌐Memory
        • ☢️Ram
        • 🤖ROM
  • 👁️‍🗨️Malware Technique
    • 📓Malware Technique
    • 💢Obfuscation
      • 🦾Anti-Debugging Techniques
      • 🏗️Instruction Substitution
      • 📔Code Obfuscation
      • 📦Code Packing
      • 💈Polymorphism
      • 🌬️Control Flow Obfuscation
      • 🪅Data Obfuscation
      • 💅Metadata Obfuscation
      • 🎣Metamorphism
      • ⛲Runtime Obfuscation
    • 🛌Persistence Mechanism
      • 🔰Registry Persistence Mechanism
      • 🗑️Task Sch Persistence Mechanism
      • 📂Startup Folder
      • 🎋AppData Folder
      • 🪹Temp Folder
  • ⚔️Malware Resources
    • 👻Malware Resources
    • 🎇Malware Sample Resources
      • 🌡️VirusShare
      • ♠️MalShare
      • 🚥MalwareTraffic
      • 🚏Malware Bazaar
  • Malware Analysis Toolkit
    • 🧌Windows Malware Analysis Toolkit
      • 💉Common Online Malware Analysis Toolkit
        • 💎Joe Sandbox
        • 🎪VT - VirusTotal
        • 👽Threat.Zone
        • 🐦Hybrid Analysis
        • 🦄Any.run
        • 🥫Filescan
      • 🥝Static Analysis Tools
        • 🍡Advance Static Analysis Tool
      • 💠Dynamic Analysis Tool
        • Advance Dynamic Analysis Tool
      • 🥜Network Analysis Tool
      • 🥟String Dumpers Toolkit
        • 📏Strings
        • 🦞Floss
    • 📱Android Malware Analysis Toolkit
      • 🕹️Static Analysis Toolkit
      • 💠Dynamic Analysis Toolkit
      • 🫒Online Analysis Toolkit
    • 📱IPHONE Malware Analysis Toolkit
      • 🥢Static Analysis Toolkit
      • ♦️Dynamic Analysis Toolkit
    • 💻MAC OSX Malware Analysis Toolkit
      • 📯Static Analysis Toolkit
      • 🍭Dynamic Analysis Toolkit
      • 🌬️Online Analysis Toolkit
  • Books and Guidelines
    • 🔋Books and Guidelines for Malware Analysis .
      • 🏋️‍♀️Android Malware Analysis 101
      • 🥖Common Anti-Forensics
      • 🦣Memory Forensics GUI
      • 📼Assembly for Malware Analyst
      • 💾Disk Image Forensics
      • ⚡Volatility Noob to Pro
  • 📋Malware Analysis Tips
    • 🖇️Malware Analysis Tips
      • 🏮Memory Malware Analysis
      • 🐜Technique to Investigate Process
      • 💥Process Lists 1
      • 💥Process Lists 2
      • 💥Process Lists 3
  • 🧽Incident Response
    • 🐳What is Incident Response
      • Incident Response Tools
      • Incident Response Toolkit
  • Technical Analysis Report
    • 🦎Technical Analysis Report
      • 🧲Stuxnet Memory Analysis
  • 🚨Rootkit Removal
    • 🤖Rootkit Removal
  • 🗜️Antivirus Artifact
    • 〽️Antivirus Artifact
      • 🀄Antivirus Process Name
  • 🧠Malware Author Mindset
    • 💽Malware Author Mindset
      • 🍫How Malware Author Terminate Antivirus Process during runtime ?
Powered by GitBook
On this page
  1. Malware Introduction
  2. Nations State APT

Chines APT

Chinese Advanced Persistent Threat (APT) groups are known for their advanced cyber-espionage techniques and strategic targeting of various sectors, including government, military, and corporate entities. Here is a list of some prominent Chinese APT groups:

Notable Chinese APT Groups

  1. APT1 (Comment Crew, Shanghai Group)

    • Affiliation: Likely associated with the People's Liberation Army (PLA) Unit 61398

    • Targets: U.S. and international corporations, particularly in technology, defense, and critical infrastructure.

    • Notable Activities: Extensive data theft, intellectual property theft, and espionage.

  2. APT10 (Stone Panda, MenuPass)

    • Affiliation: Likely associated with the Chinese Ministry of State Security (MSS)

    • Targets: Global technology, aerospace, and engineering sectors.

    • Notable Activities: Intellectual property theft, espionage, and supply chain attacks.

  3. APT12 (Twilight Spider)

    • Affiliation: Chinese government interests

    • Targets: High-profile organizations and government entities.

    • Notable Activities: Data theft and espionage focused on military and political targets.

  4. APT13 (Tempura)

    • Affiliation: Likely associated with the Chinese Ministry of State Security (MSS)

    • Targets: Technology, defense, and pharmaceutical sectors.

    • Notable Activities: Cyber-espionage, particularly focused on military technology and intellectual property.

  5. APT14 (C0d0so0, Greenbug)

    • Affiliation: Likely Chinese interests

    • Targets: Technology and telecommunications sectors.

    • Notable Activities: Cyber-espionage and data exfiltration.

  6. APT15 (Ke3chang, Vixen Panda)

    • Affiliation: Likely associated with the Chinese Ministry of State Security (MSS)

    • Targets: Government, military, and critical infrastructure sectors.

    • Notable Activities: Espionage and information gathering, particularly targeting sensitive information.

  7. APT16 (Drapes, Grey Energy)

    • Affiliation: Likely Chinese interests

    • Targets: Government agencies, defense, and aerospace sectors.

    • Notable Activities: Espionage and data theft related to government and defense technology.

  8. APT17 (Hidden Lynx)

    • Affiliation: Likely associated with Chinese interests

    • Targets: Technology, telecommunications, and defense sectors.

    • Notable Activities: Cyber-espionage and data theft focused on technology and critical infrastructure.

  9. APT19 (Deep Panda, KungFu Kittens)

    • Affiliation: Likely Chinese government interests

    • Targets: Technology, defense, and energy sectors.

    • Notable Activities: Cyber-espionage, particularly targeting intellectual property and critical infrastructure.

  10. APT32 (OceanLotus, SeaLotus)

    • Affiliation: Likely associated with Vietnamese interests but has links to Chinese operations.

    • Targets: Government agencies, businesses, and political entities, primarily in Southeast Asia.

    • Notable Activities: Espionage, data theft, and cyber-espionage focused on regional targets.

  11. APT33 (Elfin, Magnallium)

    • Affiliation: Iranian but has been known to operate with coordination from Chinese interests.

    • Targets: Aerospace, energy, and petrochemical sectors.

    • Notable Activities: Industrial espionage and attacks on critical infrastructure.

  12. APT34 (OilRig, Helix)

    • Affiliation: Iranian with some operations linked to Chinese interests.

    • Targets: Financial, energy, and telecommunications sectors.

    • Notable Activities: Espionage and data theft related to critical infrastructure.

PreviousRussian APTNextIndia APT

Last updated 10 months ago

🕷️
🦫
🇨🇳
Page cover image