- Category
- State · Attributed to a state or working for one.
- Origin
- China(high confidence)
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-1032 · unc3569
ChinaWhat it is
China-nexus espionage actor that has been observed exploiting vulnerabilities in Aspera Faspex, Microsoft Exchange, and Oracle Web Applications Desktop Integrator, among others, to gain initial access to target environments.
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Tools
The tools and malware families the sources tie to it.
- China Chopper
- DesktopNow
- Xploit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de