threat actor

APT18

unknownentity:threat_actor

Wekby was described by Palo Alto Networks in a 2015 report as: 'Wekby is a group that has been active for a number of years, targeting various industries such as healthcare, telecommunications, aerospace, defense, and high tech. The group is known to leverage recently released exploits very shortly after those exploits are available, such as in the case of HackingTeams Flash zero - day exploit.'

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: apt18
kind: threat actor
status: unknown
aliases: APT4 · BRONZE EDISON · Dynamite Panda · DYNAMITE PANDA · G0026 · MAVERICK PANDA · PLA Navy · Salmon Typhoon · SAMURAI PANDA · Satin Typhoon · SCANDIUM · SODIUM · TG-0416 · Threat Group-0416 · Wekby · Wisp Team
jurisdictions: —
claims naming it: 0 · 0 attributions · 4 relations · 0 events

Identifiers

attack G0026via mitre-attack
misp-galaxy 2fb07fa4-0d7f-43c7-8ff4-b28404313fe7via misp-galaxy-threat-actor
misp-galaxy 8e28dbee-4e9e-4491-9a6c-ee9c9ec4b28bvia misp-galaxy-threat-actor
misp-galaxy 9a683d9c-8f7d-43df-bba2-ad0ca71e277cvia misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatAPT18useshcdLoader
fetch —sha256 dc1639caa5501d72
rel_188btcintel:relations:188@v1 sha256:02f8c53cb442c776
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT18usesgh0st RAT
fetch —sha256 dc1639caa5501d72
rel_189btcintel:relations:189@v1 sha256:4d83871e0945d1e5
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT18usesPisloader
fetch —sha256 dc1639caa5501d72
rel_190btcintel:relations:190@v1 sha256:739b324c272a4ddf
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT18usesHTTPBrowser
fetch —sha256 dc1639caa5501d72
rel_191btcintel:relations:191@v1 sha256:1860a4b92696a35a
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.