Monday 2 November
Global

Your region, kept on this device.

APT18

Threat actor

Names and who uses them

  • APT18Our name
  • Dynamite PandaMITRE ATT&CK
  • TG-0416MITRE ATT&CK
  • Threat Group-0416MITRE ATT&CK

Targets

Sectors: Government, Healthcare, Manufacturing

Source: MITRE ATT&CK

Known techniques

  • T1027.013Encrypted/Encoded File
  • T1053.002At
  • T1059.003Windows Command Shell
  • T1070.004File Deletion
  • T1071.001Web Protocols
  • T1071.004DNS
  • T1078Valid Accounts
  • T1082System Information Discovery
  • T1083File and Directory Discovery
  • T1105Ingress Tool Transfer
  • T1133External Remote Services
  • T1547.001Registry Run Keys / Startup Folder
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.