PLATINUM is a sophisticated cyber espionage group identified by Microsoft, known for conducting targeted operations since at least 2009. The group, which operates with extensive resources, is assessed with high confidence to be of Chinese origin. Its primary motivation is information theft and espionage, specifically targeting sensitive intellectual property related to government interests rather than direct financial gain. A distinguishing characteristic of PLATINUM is its innovative use of advanced techniques for persistence and evasion, including the abuse of Intel Active Management Technology (AMT) Serial-over-LAN for covert command and control communications and leveraging Windows hotpatching for stealthy code injection. The group is also recognized for its use of steganography to conceal C2 traffic. PLATINUM operates under several aliases, including ATK33, G0068, and TwoForOne.

Aliases del actor

ATK33G0068TwoForOneAPT PLATINUM

Actores similares

apt-platinumactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1