APT12 — APT Profile
APT12 is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
IXESHE, DynCalc, Numbered Panda, DNSCALC, TG-2754, BeeBus, Calc Team, Crimson Iron, BRONZE GLOBE, Hexagon Typhoon
Tools & malware
- HTRAN Tunneling Tool
- Ixeshe Backdoor
- RIPTIDE Backdoor
- win.etumbot Backdoor
- win.rapid_stealer Infostealer
- win.threebyte Backdoor
- win.waterspout Backdoor
Vendor research
- Darwin’s Favorite APT Group [Blog] Moran, N., Oppenheim, M., Engle, S., & Wartell, R.
- Whois Numbered Panda Meyers
- Darwin’s Favorite APT Group [Blog] Moran