TAG-112 is a Chinese state-sponsored advanced persistent threat (APT) group that first emerged with documented activity in late May 2024, focusing on cyber-espionage against Tibetan entities. The group's primary motivation is information collection and surveillance, aligning with China's broader intelligence requirements. While exhibiting tactical overlaps with the more sophisticated Chinese state-sponsored group TAG-102, also known as Evasive Panda, TAG-112 operates with less sophistication and does not deploy custom malware, instead relying on readily available tools like Cobalt Strike. The group specifically distinguishes itself through its consistent targeting of Tibetan community websites, such as media outlets and universities.

Actores similares

tag-22actor · 1Local Data Stagingactor · 1Contagious Interviewapt · 1TAG-124apt · 0TAG-100apt · 0TAG-28apt · 0TAG-140apt · 0TAG-38apt · 0TAG-56apt · 0