| SYMBOL | COMMON_NAME | aka. SYNONYMS |
This threat actor targets Uighurs—a minority ethnic group located primarily in northwestern China—and devices from Chinese mobile phone manufacturer Xiaomi, for espionage purposes.
| 2020-06 ⋅ Lookout ⋅ Mobile APT SurveillanceCampaigns Targeting Uyghurs A collection of long-running Android tooling connected to a Chinese mAPT actor CarbonSteal DoubleAgent GoldenEagle SilkBean |
| 2020-03-02 ⋅ Virus Bulletin ⋅ Pulling the PKPLUG: the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary HenBox Farseer PlugX Poison Ivy |
| 2019-10-03 ⋅ Palo Alto Networks Unit 42 ⋅ PKPLUG: Chinese Cyber Espionage Group Attacking Asia HenBox Farseer PlugX |
| 2019 ⋅ Council on Foreign Relations ⋅ HenBox HenBox |
| 2018-03-13 ⋅ Palo Alto Networks Unit 42 ⋅ HenBox: The Chickens Come Home to Roost HenBox |