threat actor

Axiom

activeentity:threat_actor

[Axiom](https://attack.mitre.org/groups/G0001) is a suspected Chinese cyber espionage group that has targeted the aerospace, defense, government, manufacturing, and media sectors since at least 2008. Some reporting suggests a degree of overlap between [Axiom](https://attack.mitre.org/groups/G0001) and [Winnti Group](https://attack.mitre.org/groups/G0044) but the two groups appear to be distinct based on differences in reporting on TTPs and targeting.(Citation: Kaspersky Winnti April 2013)(Citati

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: axiom
kind: threat actor
status: active
aliases: Group 72
jurisdictions: —
claims naming it: 0 · 0 attributions · 8 relations · 0 events

Identifiers

attack G0001via mitre-attack

Relations

MITRE ATT&CK Enterpriserecords thatAxiomusesZxShell
fetch —sha256 dc1639caa5501d72
rel_452btcintel:relations:452@v1 sha256:c2cd56444fef22f8
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAxiomusesgh0st RAT
fetch —sha256 dc1639caa5501d72
rel_453btcintel:relations:453@v1 sha256:0df45c90dc144154
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAxiomusesZox
fetch —sha256 dc1639caa5501d72
rel_454btcintel:relations:454@v1 sha256:5074c43fcb4d06cb
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAxiomusesPlugX
fetch —sha256 dc1639caa5501d72
rel_455btcintel:relations:455@v1 sha256:02abd2b26b35e031
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAxiomusesHikit
fetch —sha256 dc1639caa5501d72
rel_456btcintel:relations:456@v1 sha256:8b381e6a8aba6cdf
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAxiomusesPoisonIvy
fetch —sha256 dc1639caa5501d72
rel_457btcintel:relations:457@v1 sha256:d35dcfdc73419358
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAxiomusesDerusbi
fetch —sha256 dc1639caa5501d72
rel_458btcintel:relations:458@v1 sha256:5a56583be8f3389e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatAxiomusesHydraq
fetch —sha256 dc1639caa5501d72
rel_459btcintel:relations:459@v1 sha256:b4fd2b1ebb8b81fb
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.