SYMBOLCOMMON_NAMEaka. SYNONYMS

IXESHE  (Back to overview)

aka: Numbered Panda, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, APT12, APT 12, BRONZE GLOBE

A group of China-based attackers, who conducted a number of spear phishing attacks in 2013.


Associated Families
win.etumbot win.rapid_stealer win.threebyte win.waterspout

References
2020SecureworksSecureWorks
@online{secureworks:2020:bronze:dc58892, author = {SecureWorks}, title = {{BRONZE GLOBE}}, date = {2020}, organization = {Secureworks}, url = {https://www.secureworks.com/research/threat-profiles/bronze-globe}, language = {English}, urldate = {2020-05-23} } BRONZE GLOBE
EtumBot Ghost RAT IXESHE
2019Council on Foreign RelationsCyber Operations Tracker
@online{tracker:2019:12:46a9a12, author = {Cyber Operations Tracker}, title = {{APT 12}}, date = {2019}, organization = {Council on Foreign Relations}, url = {https://www.cfr.org/interactive/cyber-operations/apt-12}, language = {English}, urldate = {2019-12-20} } APT 12
IXESHE
2014-09-19PWCTom Lancaster
@online{lancaster:20140919:malware:b8ce62a, author = {Tom Lancaster}, title = {{Malware microevolution}}, date = {2014-09-19}, organization = {PWC}, url = {http://pwc.blogs.com/cyber_security_updates/2014/09/malware-microevolution.html}, language = {English}, urldate = {2020-01-08} } Malware microevolution
RapidStealer
2014-09-03FireEyeNed Moran, Mike Oppenheim
@online{moran:20140903:darwins:1b05935, author = {Ned Moran and Mike Oppenheim}, title = {{Darwin’s Favorite APT Group}}, date = {2014-09-03}, organization = {FireEye}, url = {https://www.fireeye.com/blog/threat-research/2014/09/darwins-favorite-apt-group-2.html}, language = {English}, urldate = {2019-12-20} } Darwin’s Favorite APT Group
EtumBot ThreeByte WaterSpout IXESHE
2013-03-29CrowdStrikeAdam Meyers
@online{meyers:20130329:whois:2abbd69, author = {Adam Meyers}, title = {{Whois Numbered Panda}}, date = {2013-03-29}, organization = {CrowdStrike}, url = {http://www.crowdstrike.com/blog/whois-numbered-panda/}, language = {English}, urldate = {2019-12-20} } Whois Numbered Panda
IXESHE

Credits: MISP Project