DriftingCloud is a cyber espionage threat actor assessed with high confidence to be of Chinese origin. The group first emerged with documented activity in April 2020 and primarily focuses on intelligence gathering. What distinguishes DriftingCloud is its consistent use of zero-day vulnerabilities in public-facing network devices, such as firewalls, to establish initial access and perform man-in-the-middle attacks for credential and session cookie theft. The group is known for its stealthy approach and its ability to develop or acquire zero-day exploits, tipping the scales in their favor when it comes to gaining entry to target networks. This group does not operate under multiple publicly known names and is not commonly confused with other unrelated threat actors.

Aliases del actor

APT DRIFTINGCLOUD

Actores similares

apt-driftingcloudactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1