GINC Technology
GINC-APT-0405 · State

GreenSpot

Also APT-C-01, APT-Q-20, PoisonVine.

Category
State · Attributed to a state or working for one.
Origin
Taiwan(high confidence)
Sources
5 sources carry it
Identifier
GINC-APT-0405 · greenspot

What it is

APT-C-01又名毒云藤，是一个长期针对中国境内的APT组织，至少从2007年开始活跃。曾对中国国防、政府、科技、教育以及海事机构等重点单位和部门进行了长达11年的网络间谍活动，主要关注军工、中美关系、两岸关系和海洋相关的领域，旨在窃取重大决策及敏感信息。APT-C-01由360威胁情报中心首次披露，结合该组织关联地区常见的蔓藤植物，因此将其命名为“毒云藤”。

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

QiAnXin
APT-Q-20
Qihoo 360
APT-C-01
Other names
PoisonVine

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Western sources

Chinese and Russian sources

  • Qihoo 360Taiwan
  • CVERC / 360 · 2025-06-05Operation Futile report. Targets: government, defence, research, education, civil aviation, maritime.Taiwan · high (claimant)

Tools

The tools and malware families the sources tie to it.

  • China Chopper

Sources