APT27, also known by aliases such as Emissary Panda or TG-3390, is a state-sponsored cyber espionage group originating from China, with activities documented since at least November 2009. The group primarily operates to collect political, economic, strategic, and technological intelligence in furtherance of China's national security interests. Initially focused on traditional espionage, APT27 notably evolved around 2020 to incorporate financially motivated cybercrime, including ransomware attacks, distinguishing its operational model from many other state-backed threat actors. The group often operates through a network of hacker-for-hire contractors to obscure direct government involvement and has demonstrated consistent adaptability in its tactics over more than a decade of activity. APT27 is recognized under numerous names by different security researchers, underscoring its widespread and long-standing presence in the threat landscape.

Aliases del actor

BRONZE UNIONBudwormCircle TyphoonEMISSARY PANDAEarth SmilodonG0027GreedyTaotieGroup 35Iron TaurusIron TigerLinen TyphoonLucky MouseRed PhoenixTEMP.HippoTG-3390ZipTokenAPT 27apt 27apt27bronze unioncycldekemissary pandagoblin pandagroup 35iron tigerluckymousetempTiltedTempleel sector educativo superiorlos servicios consultorioslas tecnologías de informacióneste grupo es conocido por su actividad maliciosa en redes

Actores similares

APT27 (Emissary Panda)actor · 1apt-irontigeractor · 1Temper Pandaapt · 0Union Pandaapt · 0Predator Pandaapt · 0GOBLIN PANDAapt · 0Iron Groupapt · 0apt-sharppandaactor · 1apt-twistedpandaactor · 1Mustang Pandaapt · 1