- Category
- State · Attributed to a state or working for one.
- Origin
- India(medium confidence)
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1180 · cnc
IndiaWhat it is
该组织于2019年发现,因为样本的pdb路径中有cnc_client字符，所以暂时叫做CNC组织。该组织定向攻击我国教育、航天、军工和医疗等行业，窃取情报。在攻击过程中会尝试使用Nday，并且有能够开发GO语言木马的开发人员。
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Qihoo 360
- APT-C-48
- Other names
- CNC - APT-C-48
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Chinese and Russian sources
- Qihoo 360India