threat actor
APT9
APT9 engages in cyber operations where the goal is data theft, usually focusing on the data and projects that make a particular organization competitive within its field. APT9 was historically very active in the pharmaceuticals and biotechnology industry. We have observed this actor use spearphishing, valid accounts, as well as remote services for Initial Access. On at least one occasion, Mandiant observed APT9 at two companies in the biotechnology industry and suspect that APT9 actors may have
Curated · btcintel
claims we make, each with its source and citation · sources may contradict; we show the set, never a score
Facts
- id
- apt9
- kind
- threat actor
- status
- unknown
- aliases
- Group 27 · NIGHTSHADE PANDA · Red Pegasus
- jurisdictions
- —
- claims naming it
- 0 · 0 attributions · 0 relations · 0 events
Identifiers
- misp-galaxy 7e6d82a4-3b7d-4c24-a2c5-e211ce6eafc5via misp-galaxy-threat-actor
Relations
computedno relations recorded for this entity
Events
computedno dated events recorded for this entity
Claims naming this entity
computedno current claim names this entity
Subjects0 subjects carry a claim naming this entity · a sample
computedno subject carries a claim naming this entity
Community
notes from Nostr labelers · never merged with the bands above · not endorsed
Community content is indexed from Nostr and not endorsed by btcintel.
not computed yetNot indexed yet: the community index has not looked at this subject.