TianWu — APT Profile
TianWu has very limited verifiable public documentation in open-source reporting. While it appears in some threat intelligence taxonomies attributed to China, no major cybersecurity research firm has published a comprehensive public report detailing its malware families, confirmed attack campaigns, or specific operational TTPs. Any characterizations should be treated with low confidence until corroborated by primary intelligence sources.
Tools & malware
- win.cobalt_strike Adversary Simulation
Vendor research
Read the full analysis on IntelFusions