- Category
- State · Attributed to a state or working for one.
- Origin
- China(high confidence)
- Sponsor
- Unknown
- Motivation
- Espionage; Information theft and espionage
- Seen
- 2013–2015
- Status
- Dormant
- Sources
- 8 sources carry it
- Identifier
- GINC-APT-0114 · blue-termite
ChinaWhat it is
Blue Termite is a group of suspected Chinese origin active in Japan.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- PwC
- Blue Termite, Cloudy Omega
- Other names
- Cloudy Omega, Emdivi
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Targets
- Countries
- Japan
- Sectors
- Automotive, Chemical, Construction, Education, Energy, Financial, Food and Agriculture, Government, Healthcare, High-Tech, Industrial, IT, Media, Private sector, Telecommunications, Transportation
Tools
The tools and malware families the sources tie to it.
- 0-days from the Hacking Team breach
- Blue Banana
- Emdivi
Sources
- ETDA Threat Group Card apt.etda.or.th
- Malpedia malpedia.caad.fkie.fraunhofer.de