threat actor

APT1

unknownentity:threat_actor

PLA Unit 61398 (Chinese: 61398部队, Pinyin: 61398 bùduì) is the Military Unit Cover Designator (MUCD)[1] of a People's Liberation Army advanced persistent threat unit that has been alleged to be a source of Chinese computer hacking attacks

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: apt1
kind: threat actor
status: unknown
aliases: Brown Fox · Byzantine Candor · Comment Crew · Comment Group · Comment Panda · COMMENT PANDA · G0006 · GIF89a · Group 3 · PLA Unit 61398 · ShadyRAT · TG-8223
jurisdictions: —
claims naming it: 0 · 0 attributions · 6 relations · 0 events

Identifiers

attack G0006via mitre-attack
misp-galaxy 1cb7e1cc-d695-42b1-92f4-fd0112a3c9bevia misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatAPT1usesSeasalt
fetch —sha256 dc1639caa5501d72
rel_312btcintel:relations:312@v1 sha256:5e51b908907245cf
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT1usesBISCUIT
fetch —sha256 dc1639caa5501d72
rel_313btcintel:relations:313@v1 sha256:3fd1e26b2339dbf3
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT1usesGLOOXMAIL
fetch —sha256 dc1639caa5501d72
rel_314btcintel:relations:314@v1 sha256:6810d3599106f433
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT1usesPoisonIvy
fetch —sha256 dc1639caa5501d72
rel_315btcintel:relations:315@v1 sha256:8a882d154775f63e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT1usesWEBC2
fetch —sha256 dc1639caa5501d72
rel_316btcintel:relations:316@v1 sha256:ba7636475d029cb8
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT1usesCALENDAR
fetch —sha256 dc1639caa5501d72
rel_317btcintel:relations:317@v1 sha256:cfeb47878664e3a1
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.