SYMBOLCOMMON_NAMEaka. SYNONYMS

APT12  (Back to overview)

aka: NUMBERED PANDA, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, IXESHE, BRONZE GLOBE

A group of China-based attackers, who conducted a number of spear phishing attacks in 2013.


Associated Families
win.etumbot win.rapid_stealer win.threebyte win.waterspout

References
2022-08-04MandiantMandiant
@online{mandiant:20220804:advanced:afb8956, author = {Mandiant}, title = {{Advanced Persistent Threats (APTs)}}, date = {2022-08-04}, organization = {Mandiant}, url = {https://www.mandiant.com/resources/insights/apt-groups}, language = {English}, urldate = {2022-08-30} } Advanced Persistent Threats (APTs)
APT1 APT10 APT12 APT14 APT15 APT16 APT17 APT18 APT19 APT2 APT20 APT21 APT22 APT23 APT24 APT27 APT3 APT30 APT31 APT4 APT40 APT5 APT9 Naikon
2020SecureworksSecureWorks
@online{secureworks:2020:bronze:dc58892, author = {SecureWorks}, title = {{BRONZE GLOBE}}, date = {2020}, organization = {Secureworks}, url = {https://www.secureworks.com/research/threat-profiles/bronze-globe}, language = {English}, urldate = {2020-05-23} } BRONZE GLOBE
EtumBot Ghost RAT APT12
2019Council on Foreign RelationsCyber Operations Tracker
@online{tracker:2019:12:46a9a12, author = {Cyber Operations Tracker}, title = {{APT 12}}, date = {2019}, organization = {Council on Foreign Relations}, url = {https://www.cfr.org/interactive/cyber-operations/apt-12}, language = {English}, urldate = {2019-12-20} } APT 12
APT12
2014-09-19PWCTom Lancaster
@online{lancaster:20140919:malware:b8ce62a, author = {Tom Lancaster}, title = {{Malware microevolution}}, date = {2014-09-19}, organization = {PWC}, url = {http://pwc.blogs.com/cyber_security_updates/2014/09/malware-microevolution.html}, language = {English}, urldate = {2020-01-08} } Malware microevolution
RapidStealer
2014-09-03FireEyeNed Moran, Mike Oppenheim
@online{moran:20140903:darwins:1b05935, author = {Ned Moran and Mike Oppenheim}, title = {{Darwin’s Favorite APT Group}}, date = {2014-09-03}, organization = {FireEye}, url = {https://www.fireeye.com/blog/threat-research/2014/09/darwins-favorite-apt-group-2.html}, language = {English}, urldate = {2019-12-20} } Darwin’s Favorite APT Group
EtumBot ThreeByte WaterSpout APT12
2013-03-29CrowdStrikeAdam Meyers
@online{meyers:20130329:whois:2abbd69, author = {Adam Meyers}, title = {{Whois Numbered Panda}}, date = {2013-03-29}, organization = {CrowdStrike}, url = {http://www.crowdstrike.com/blog/whois-numbered-panda/}, language = {English}, urldate = {2019-12-20} } Whois Numbered Panda
APT12

Credits: MISP Project