Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT9 [Date of discovery] APT9, possibly originating from China, engages in cyber operations focused on data theft, primarily targeting organizations in sectors such as health care, pharmaceuticals, construction, engineering, aerospace, and defense. The group utilizes various attack vectors, including…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT12 [Date of discovery] APT12, also known as Calc Team, is a cyber espionage group believed to have links to the Chinese People’s Liberation Army. The group targets journalists, government, and the defense industrial base, aligning with larger People’s…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT3 [Date of discovery] APT3, also known as UPS Team, is a sophisticated cyber threat group suspected to originate from China. They target sectors including aerospace and defense, construction and engineering, high tech, telecommunications, and transportation. APT3 is known…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT6 [Date of discovery] APT6, suspected to originate from China, engages in cyber operations focused on data theft, targeting organizations in sectors such as transportation, automotive, construction, engineering, telecommunications, and electronics. The group utilizes various custom backdoors as part…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT21 [Date of discovery] APT21, also known as Zhenbao, is a suspected cyber threat group attributed to China. They primarily target government sectors, leveraging strategic Russian-language attachments themed with national security issues in lure documents. Associated malware includes SOGU,…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT20 [Date of discovery] APT20, also known as Twivy, is a suspected cyber threat group attributed to China. They target sectors such as construction, engineering, healthcare, non-profit organizations, defense, and chemical research and production companies. APT20 conducts data theft…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT19 [Date of discovery] APT19, also known as Codoso Team, is a suspected cyber threat group attributed to China. They target legal and investment sectors. APT19 likely comprises freelancers with some degree of sponsorship by the Chinese government. Associated…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT18 [Date of discovery] APT18, also known as Wekby, is a suspected cyber threat group attributed to China. Their target sectors include Aerospace and Defense, Construction and Engineering, Education, Health and Biotechnology, High Tech, Telecommunications, and Transportation. Very little…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT17 [Date of discovery] APT17, also known as Tailgator Team or Deputy Dog, is a suspected cyber threat group attributed to China. They primarily target the U.S. government, international law firms, and information technology companies. APT17 conducts network intrusion…
Cybersecurity Incident Report Incident Name Incident Discovery Date Cyber Incident Severity Affected Systems Response States Vulnerability APT16 [Date of discovery] APT16, suspected to be attributed to China, targets Japanese and Taiwanese organizations in the high-tech, government services, media, and financial services industries. The group is primarily concerned with Taiwan political and journalistic matters. APT16 employs…