Xiaoqiying is a primarily Chinese-speaking threat group that is most well known for conducting website defacement and data exfiltration attacks on more than a dozen South Korean research and academic institutions in late-January 2023. Research from Recorded Futures Insikt Group has found that the groups affiliated threat actors have signaled a new round of cyberattacks against organizations in Japan and Taiwan. Although it shows no clear ties to the Chinese government, Xiaoqiying is staunchly pro-China and vows to target NATO countries as well as any country or region that is deemed hostile to China.
There are currently no families associated with this actor.
Xiaoqiying/Genesis Day Threat Actor Group Targets South Korea, Taiwan
Samsung investigating claims of hack on South Korea systems, internal employee platform
变脸, Teng Snake (a.k.a. Code Core)