Uptime Hamster: 10d 6h 42mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
Logo del actor de amenaza Tonto Team

Tonto Team

1 incidentes 1 paises 1 sectores apt CN Ultimo: 2026-05-25
Aliases: BRONZE HUNTLEY, COPPER, CactusPete, Earth Akhlut, G0131, KARMA PANDA, PLA Unit 65017, Red Beifang, TAG-74, Bisonal, Lone Ranger, otros mencionados en fuentes OSINT verificadas, bisonal, tonto, tontoteam, G0131 o Seven Pointed Dagger, Bisonal (malware), Dissident groups
Ver en IntelTracker → APTTrail →
Tonto Team, known by various aliases including Bronze Huntley, CactusPete, Earth Akhlut, G0131, and Karma Panda, is a cyber espionage threat group assessed to be state-sponsored and operating from China. The group commenced its activities in 2009, primarily driven by the objective of intelligence gathering for national interests. Tonto Team distinguishes itself through persistent targeting of government, military, energy, financial, educational, healthcare, and technology sectors, with a geographical focus spanning the Asia Pacific region, the United States, and Eastern Europe. The group’s operational approach frequently involves the use of custom malware and the exploitation of known vulnerabilities to establish and maintain covert access within compromised networks, notably employing the Royal Road exploitation toolkit to deliver various backdoors. The group also goes by the alias HeartBeat and has been referred to as UAC-0018.

Aliases del actor

BRONZE HUNTLEYCOPPERCactusPeteEarth AkhlutG0131KARMA PANDAPLA Unit 65017Red BeifangTAG-74BisonalLone Rangerotros mencionados en fuentes OSINT verificadasbisonaltontotontoteamG0131 o Seven Pointed DaggerBisonal (malware)Dissident groupsotros referencias en inteligencia de amenzas

Actores similares

karma-pandaactor · 1predator-pandaactor · 1Predator Pandaapt · 0bisonalactor · 1tonto-teamactor · 1Aquatic Pandaactor · 1Mustang Pandaapt · 1APT27 (Emissary Panda)actor · 1Putter Pandaapt · 1Deep Pandaactor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownduckduckgo.comTonto Team (China)
Webunknownduckduckgo.comTonto Team (China)
Motivacion