ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Comment Crew
0 incidentes
0 paises
0 sectores
apt CN Ultimo: -
Aliases: APT1, Brown Fox, Byzantine Candor, COMMENT PANDA, Comment Group, G0006, GIF89a, Group 3, PLA Unit 61398, ShadyRAT, TG-8223, lo que sugiere una red de actividades coordenadas, Comment Panda, BrownFox, Shanghai Group, PLA Unit 61398 (Unidad 61398 del Ejército Popular Liberador)
Comment Crew, also known as APT1, is a state-sponsored cyber espionage group assessed with high confidence to be linked to China's People's Liberation Army (PLA) Unit 61398. The group emerged around 2006 and gained notoriety following Mandiant's groundbreaking 2013 report, which publicly attributed its extensive cyber espionage campaign to a specific military unit. Their primary motivation is the systematic theft of intellectual property and sensitive data to further Chinese national interests. What specifically sets Comment Crew apart is its pioneering use of stealthy communication techniques, notably hiding commands within HTML comments for command and control, a method that earned the group its name. The group is also known for its long-term persistence within targeted networks, often maintaining access for nearly a year and in some cases for several years. Comment Crew operates under numerous aliases, including APT1, Comment Panda, and Shanghai Group.