Who is APT17? APT17 is a state-sponsored group frequently tied to China. Many of their operations targeted organizations to steal proprietary information and military secrets. The use of zero-day exploits indicates either the ability to perform advanced vulnerability research or purchase these valuable and expensive exploits. This group performed multiple

Who is APT14? APT14 is attributed to China in a brief post by CrowdStrike. CrowdStrike revealed that APT14 was “targeting both civilian and military maritime operations in the green/brown water regions primarily in the area of operations of the South Sea Fleet of the PLA Navy” during 2012-2013. The

Who is APT12? APT12 is an attack group that focuses on specific targets to conduct espionage. These attackers are believed to be responsible for complex campaigns which require planning and preparation to execute successfully. Techniques include obfuscating traffic origin by routing traffic through compromised networks unrelated to the attackers'

Who is APT5? According to FireEye, APT5 has been actively targeting telecommunications and technology companies since 2007. This group appears to be large and sophisticated. APT5 uses malware equipped with keylogging functions to gather information for future compromise as well as regional intelligence. Based on the industry and organizational targets,

Who is APT3? APT3 is a sophisticated attack group that has been attributed to China's Ministry of State Security (MSS). [1] FireEye first reported about APT3 in 2010, and various researchers have followed attacks attributed to this group as recently as 2017. [3][5] In 2017, a researcher

Who is APT1? APT1 was first reported publicly in detail by Mandiant, following years of extensive investigations. According to Mandiant, “APT1 is believed to be the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department (总参三部二局), which is most commonly known by its