threat actor

APT5

unknownentity:threat_actor

We have observed one APT group, which we call APT5, particularly focused on telecommunications and technology companies. More than half of the organizations we have observed being targeted or breached by APT5 operate in these sectors. Several times, APT5 has targeted organizations and personnel based in Southeast Asia. APT5 has been active since at least 2007. It appears to be a large threat group that consists of several subgroups, often with distinct tactics and infrastructure. APT5 has target

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: apt5
kind: threat actor
status: unknown
aliases: BASALT CASTLE · BRONZE FLEETWOOD · Keyhole Panda · KEYHOLE PANDA · MANGANESE · Mulberry Typhoon · Poisoned Flight · TEMP.Bottle · UNC2630
jurisdictions: —
claims naming it: 0 · 0 attributions · 8 relations · 0 events

Identifiers

attack G1023via mitre-attack
misp-galaxy 86dfe64e-7101-4d45-bb94-efc40c5e14fevia misp-galaxy-threat-actor
misp-galaxy a47b79ae-7a0c-4308-9efc-294af19cc795via misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatAPT5usesPoisonIvy
fetch —sha256 dc1639caa5501d72
rel_516btcintel:relations:516@v1 sha256:1e707500aa27b05b
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT5usesRAPIDPULSE
fetch —sha256 dc1639caa5501d72
rel_517btcintel:relations:517@v1 sha256:7f83eea479b574c6
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT5usesSLOWPULSE
fetch —sha256 dc1639caa5501d72
rel_518btcintel:relations:518@v1 sha256:ebf91eeec82d2183
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT5usesSLIGHTPULSE
fetch —sha256 dc1639caa5501d72
rel_519btcintel:relations:519@v1 sha256:17345dbe2b7facce
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT5usesSkeleton Key
fetch —sha256 dc1639caa5501d72
rel_520btcintel:relations:520@v1 sha256:1f1361038a86c148
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT5usesPACEMAKER
fetch —sha256 dc1639caa5501d72
rel_521btcintel:relations:521@v1 sha256:d86b6c2387aaa3ec
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT5usesgh0st RAT
fetch —sha256 dc1639caa5501d72
rel_522btcintel:relations:522@v1 sha256:382b2cc5cb589718
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAPT5usesPULSECHECK
fetch —sha256 dc1639caa5501d72
rel_523btcintel:relations:523@v1 sha256:b126f79a95187478
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.