threat actor

APT3

unknownentity:threat_actor

Symantec described UPS in 2016 report as: 'Buckeye (also known as APT3, Gothic Panda, UPS Team, and TG-0110) is a cyberespionage group that is believed to have been operating for well over half a decade. Traditionally, the group attacked organizations in the US as well as other targets. However, Buckeyes focus appears to have changed as of June 2015, when the group began compromising political entities in Hong Kong.'

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: apt3
kind: threat actor
status: unknown
aliases: BORON · Boyusec · Brocade Typhoon · BRONZE MAYFAIR · Buckeye · Gothic Panda · GOTHIC PANDA · Group 6 · Pirpi · Red Sylvan · TG-0110 · Threat Group-0110 · UPS · UPS Team
jurisdictions: —
claims naming it: 0 · 0 attributions · 4 relations · 0 events

Identifiers

attack G0022via mitre-attack
misp-galaxy d144c83e-2302-4947-9e24-856fbf7949aevia misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatAPT3usesOSInfo
fetch —sha256 dc1639caa5501d72
rel_31btcintel:relations:31@v1 sha256:e41408bb7643ea88
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT3usesPlugX
fetch —sha256 dc1639caa5501d72
rel_32btcintel:relations:32@v1 sha256:e55634a107b0955e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT3usesSHOTPUT
fetch —sha256 dc1639caa5501d72
rel_33btcintel:relations:33@v1 sha256:d1e0454b842c799a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT3usesRemoteCMD
fetch —sha256 dc1639caa5501d72
rel_34btcintel:relations:34@v1 sha256:fa8f479d17110d6f
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.