Monday 2 November
Global

Your region, kept on this device.

Elderwood

Threat actor

Attributed to China by MITRE ATT&CK (source). An attribution, not a proven fact.

Names and who uses them

  • ElderwoodOur name
  • Beijing GroupMITRE ATT&CK
  • Sneaky PandaMITRE ATT&CK
  • Elderwood GangSymantec

Targets

Sectors: Defence, Manufacturing, NGOs and think tanks

Source: MITRE ATT&CK

Known techniques

  • T1027.002Software Packing
  • T1027.013Encrypted/Encoded File
  • T1105Ingress Tool Transfer
  • T1189Drive-by Compromise
  • T1203Exploitation for Client Execution
  • T1204.001Malicious Link
  • T1204.002Malicious File
  • T1566.001Spearphishing Attachment
  • T1566.002Spearphishing Link
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.