Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT5 [Date of discovery] APT5, believed to originate from China, has been active since at least 2007, targeting regional telecommunication providers, technology firms, high-tech manufacturing, and military technology in the U.S., Europe, and Asia. The group focuses on data…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT7 [Date of discovery] APT7, suspected to originate from China, engages in cyber operations focused on intellectual property theft, particularly targeting organizations in sectors such as construction, engineering, aerospace, and defense. The group utilizes various attack vectors, including lateral…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT8 [Date of discovery] APT8, possibly originating from China, engages in cyber operations focused on intellectual property theft, primarily targeting organizations in sectors such as media, entertainment, construction, engineering, aerospace, and defense. The group utilizes various attack vectors, including…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT9 [Date of discovery] APT9, possibly originating from China, engages in cyber operations focused on data theft, primarily targeting organizations in sectors such as health care, pharmaceuticals, construction, engineering, aerospace, and defense. The group utilizes various attack vectors, including…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT12 [Date of discovery] APT12, also known as Calc Team, is a cyber espionage group believed to have links to the Chinese People’s Liberation Army. The group targets journalists, government, and the defense industrial base, aligning with larger People’s…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT3 [Date of discovery] APT3, also known as UPS Team, is a sophisticated cyber threat group suspected to originate from China. They target sectors including aerospace and defense, construction and engineering, high tech, telecommunications, and transportation. APT3 is known…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT6 [Date of discovery] APT6, suspected to originate from China, engages in cyber operations focused on data theft, targeting organizations in sectors such as transportation, automotive, construction, engineering, telecommunications, and electronics. The group utilizes various custom backdoors as part…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT21 [Date of discovery] APT21, also known as Zhenbao, is a suspected cyber threat group attributed to China. They primarily target government sectors, leveraging strategic Russian-language attachments themed with national security issues in lure documents. Associated malware includes SOGU,…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT20 [Date of discovery] APT20, also known as Twivy, is a suspected cyber threat group attributed to China. They target sectors such as construction, engineering, healthcare, non-profit organizations, defense, and chemical research and production companies. APT20 conducts data theft…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT19 [Date of discovery] APT19, also known as Codoso Team, is a suspected cyber threat group attributed to China. They target legal and investment sectors. APT19 likely comprises freelancers with some degree of sponsorship by the Chinese government. Associated…