- Category
- State · Attributed to a state or working for one.
- Origin
- China(high confidence)
- Sponsor
- China
- Motivation
- Espionage
- Sources
- 4 sources carry it
- Identifier
- GINC-APT-0536 · henbox
ChinaWhat it is
This threat actor targets Uighurs—a minority ethnic group located primarily in northwestern China—and devices from Chinese mobile phone manufacturer Xiaomi, for espionage purposes.
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Targets
- Countries
- Uighurs
- Sectors
- Civil society
Tools
The tools and malware families the sources tie to it.
- China Chopper
- MobileOrder
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de