APT · China
PRC-linked actor living off the land in US critical infrastructure, focusing on communications and energy sectors.
Псевдонимы: BRONZE SILHOUETTE, Vanguard Panda
Мотивация: Pre-positioning for critical infrastructure disruption
Эксфильтрация данных
Field telemetry from Toronto correlates with Volt Typhoon Router Implant Found in Telecom Backbone.
Требование выкупа
Field telemetry from Moscow correlates with FIN7 Deploys Custom Backdoor Against Retail POS Systems.
Боковое перемещение
Field telemetry from Singapore correlates with Telecom Provider BGP Hijack Routes Traffic Through Adversary AS.
Требование выкупа
Field telemetry from Toronto correlates with Volt Typhoon Router Implant Found in Telecom Backbone.
Ликвидация инцидента
Field telemetry from Moscow correlates with FIN7 Deploys Custom Backdoor Against Retail POS Systems.
Эксфильтрация данных
Field telemetry from Singapore correlates with Telecom Provider BGP Hijack Routes Traffic Through Adversary AS.
Разведка
Field telemetry from Moscow correlates with FIN7 Deploys Custom Backdoor Against Retail POS Systems.
Требование выкупа
Field telemetry from Singapore correlates with Telecom Provider BGP Hijack Routes Traffic Through Adversary AS.
Ликвидация инцидента
Field telemetry from Toronto correlates with Volt Typhoon Router Implant Found in Telecom Backbone.