SYMBOLCOMMON_NAMEaka. SYNONYMS

APT1  (Back to overview)

aka: Brown Fox, Byzantine Candor, COMMENT PANDA, Comment Crew, Comment Group, G0006, GIF89a, Group 3, PLA Unit 61398, ShadyRAT, TG-8223

PLA Unit 61398 (Chinese: 61398部队, Pinyin: 61398 bùduì) is the Military Unit Cover Designator (MUCD)[1] of a People's Liberation Army advanced persistent threat unit that has been alleged to be a source of Chinese computer hacking attacks

Associated Families
win.auriga win.bangat win.biscuit win.bouncer win.combos win.cookiebag win.dairy win.getmail win.glooxmail win.goggles win.hacksfase win.helauto win.kurton win.manitsme win.mapiget win.miniasp win.newsreels win.seasalt win.starsypound win.sword win.tabmsgsql win.tarsip win.webc2_adspace win.webc2_ausov win.webc2_bolid win.webc2_cson win.webc2_div win.webc2_greencat win.webc2_head win.webc2_kt3 win.webc2_qbp win.webc2_rave win.webc2_table win.webc2_ugx win.webc2_yahoo
References
2022-08-04 ⋅ Mandiant ⋅ Mandiant
Advanced Persistent Threats (APTs)
APT1 APT10 APT12 APT14 APT15 APT16 APT17 APT18 APT19 APT2 APT20 APT21 APT22 APT23 APT24 APT27 APT3 APT30 APT31 APT4 APT40 APT5 APT9 Naikon
2019-11-19 ⋅ FireEye ⋅ Kelli Vanderlee, Nalani Fraser
Achievement Unlocked: Chinese Cyber Espionage Evolves to Support Higher Level Missions
APT1 APT10 APT2 APT26 APT3 APT30 APT41 Naikon Tonto Team
2019-01-01 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
PLA Unit 61398
APT1
2019-01-01 ⋅ MITRE ⋅ MITRE ATT&CK
Group description: APT1
APT1
2018-10-18 ⋅ McAfee ⋅ Asheer Malhotra, Ryan Sherstobitoff
‘Operation Oceansalt’ Attacks South Korea, U.S., and Canada With Source Code From Chinese Hacker Group
Oceansalt APT1
2018-10-17 ⋅ Raj Samani, Ryan Sherstobitoff
‘Operation Oceansalt’ Delivers Wave After Wave
APT1
2018-01-01 ⋅ FireEye ⋅ FireEye
The Forrester New Wave™: External Threat Intelligence Services, Q3 2018.
APT1
2018-01-01 ⋅ Mandiant ⋅ Mandiant
APT1
Auriga Biscuit Bouncer Combos CookieBag Dairy GetMail GlooxMail Goggles Hacksfase Helauto Kurton ManItsMe MAPIget MiniASP NewsReels SeaSalt StarsyPound Sword TabMsgSQL Tarsip WebC2-AdSpace WebC2-Ausov WebC2-Bolid WebC2-Cson WebC2-DIV WebC2-GreenCat WebC2-Head WebC2-Kt3 WebC2-Qbp WebC2-Rave WebC2-Table WebC2-UGX WebC2-Yahoo
2014-05-19 ⋅ The New York Times ⋅ David E. Sanger, Michael S. Schmidt
5 in China Army Face U.S. Charges of Cyberattacks
APT1
2014-03-12 ⋅ FireEye ⋅ Mike Oppenheim, Ned Moran
A Detailed Examination of the Siesta Campaign
APT1 Siesta
2014-03-06 ⋅ Trend Micro ⋅ Maharlito Aquino
The Siesta Campaign: A New Targeted Attack Awakens
APT1
2013-02-20 ⋅ FireEye ⋅ Mandiant
APT 1 Malware Arsenal Technical Annex
bangat
2013-02-19 ⋅ Wikipedia ⋅ Various
PLA Unit 61398
APT1
2013-02-19 ⋅ FireEye ⋅ FireEye
APT1: Exposing One of China’s Cyber Espionage Units
APT1
2013-02-19 ⋅ Symantec ⋅ A L Johnson
APT1: Q&A on Attacks by the Comment Crew
APT1
Credits: MISP Project