GINC Technology
GINC-APT-1229 · State

旺刺组织

Also APT-C-47.

Category
State · Attributed to a state or working for one.
Origin
South Korea(medium confidence)
Sources
1 source carries it
Identifier
GINC-APT-1229 · actor

What it is

近期，360安全大脑检测到多起ClickOnce恶意程序的攻击活动，通过360高级威胁研究院的深入研判分析，发现这是一起来自半岛地区未被披露APT组织的攻击行动，攻击目标涉及与半岛地区有关联的实体机构和个人，根据360安全大脑的数据分析显示，该组织的攻击活动最早可以追溯到2018年。目前还没有任何安全厂商公开披露该组织的攻击活动，也没有安全厂商公开披露利用该技术的真实APT攻击事件。由于此次攻击活动属于360全球首次捕获披露，我们根据该组织擅长攻击技术的谐音，将其命名为“旺刺”组织，并为其分配了新编号APT-C-47。

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Qihoo 360
APT-C-47

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Chinese and Russian sources

Sources