Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

APT-C-12

0 incidentes 0 paises 0 sectores apt CN Ultimo: -

Aliases: Blue Mushroom, NuclearCrisis, Sapphire Mushroom, apt-c-12, apt12, bluemushroom, dnscalc, dyncalc, ixeshe

Ver en IntelTracker → APTTrail →

APT-C-12, also known by the aliases Numbered Panda, DynCalc, Blue Mushroom, NuclearCrisis, and Sapphire Mushroom, is a cyber espionage group that has been active since at least 2009. This group is assessed with high confidence to be of Chinese origin. Their primary motivation is the exfiltration of sensitive data, specifically intellectual property, from targeted organizations. The group is notable for its use of custom malware and long-term infiltration strategies directed against high-value assets. Campaigns attributed to this group, such as those linked to Sapphire Mushroom, have utilized specific techniques including LNK files.

Aliases del actor

Blue Mushroom NuclearCrisis Sapphire Mushroom apt-c-12 apt12 bluemushroom dnscalc dyncalc ixeshe

Actores similares

apt-blueprintactor · 1 apt-45actor · 2 apt-c-27actor · 2 apt-c-01actor · 2 apt-18actor · 1 apt-1877teamactor · 1 apt-27actor · 1 apt-30actor · 1 apt-38actor · 1 apt-c-48actor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
X/Twitter	unknown	bitofhex.com	apt-c-12 indicators and references
Repositorio	unknown	github.com	apt-c-12 indicators and references
DLS / leak site	unknown	otx.alienvault.com	apt-c-12 indicators and references
X/Twitter	unknown	twitter.com	apt-c-12 indicators and references
DLS / leak site	unknown	www.fireeye.com	apt-c-12 indicators and references
DLS / leak site	unknown	www.virustotal.com	apt-c-12 indicators and references
DLS / leak site	unknown	www.virustotal.com	apt-c-12 indicators and references
Repositorio	unknown	github.com	apt-c-12 indicators and references
DLS / leak site	unknown	raw.githubusercontent.com	apt-c-12 indicators and references
X/Twitter	unknown	128.199.73.43APTTrailURLhttp	apt-c-12 indicators and references

Malware asociado

win.etumbot, win.rapid_stealer

Tecnicas MITRE

T1204.002, T1568.003, T1204, T1102, T1568, T1059.001

Tipo

apt

Pais origen

Motivacion

Impacto

Actualizado

Wed, 01 Ju

Sectores objetivo (SOCRadar)

Other Information ServicesMonetary Authorities-Central BankSoftware PublishersManufacturingElectrical Equipment, Appliance, and Component ManufacturingPublic AdministrationEducational ServicesInternet PublishingSpace & DefenseEnergy & Utilities