{"id":372,"date":"2024-09-02T06:55:58","date_gmt":"2024-09-02T06:55:58","guid":{"rendered":"https:\/\/familiebuckens.nl\/?page_id=372"},"modified":"2025-07-03T07:39:55","modified_gmt":"2025-07-03T05:39:55","slug":"apts","status":"publish","type":"page","link":"https:\/\/familiebuckens.nl\/index.php\/apts\/","title":{"rendered":"APTs"},"content":{"rendered":"\n

<\/p>\n\n\n\n

APT<\/th>Suspected<\/strong><\/th>Associated groups<\/th>Associated malware<\/th><\/tr><\/thead>
APT41<\/a><\/td>China<\/td>Wicked Panda, Brass Typhoon, BARIUM<\/td><\/td><\/tr>
APT40<\/a><\/td>China<\/td><\/td>BADSIGN, FIELDGOAL, FINDLOCK, PHOTO, SCANBOX, SOGU, WIDETONE<\/td><\/tr>
APT39<\/a><\/td>Iran<\/td>ITG07, Chafer, Remix Kitten<\/td>SEAWEED, CACHEMONEY, POWBAT<\/td><\/tr>
APT38<\/a><\/td>North Korea<\/td>NICKEL GLADSTONE, BeagleBoyz, Bluenoroff, Stardust Chollima, Sapphire Sleet, COPERNICIUM<\/td><\/td><\/tr>
APT37<\/a><\/td>North Korea<\/td>InkySquid, ScarCruft, Reaper, Group123, TEMP.Reaper, Ricochet Chollima<\/td><\/td><\/tr>
APT36<\/a><\/td><\/td><\/td><\/td><\/tr>
APT35<\/a><\/td><\/td><\/td>ASPXSHELLSV, BROKEYOLK, PUPYRAT, TUNNA, MANGOPUNCH, DRUBOT, HOUSEBLEND<\/td><\/tr>
APT34<\/a><\/td>Iran<\/td><\/td>POWBAT, POWRUNER, BONDUPDATER<\/td><\/tr>
APT33<\/a><\/td>Iran<\/td>HOLMIUM, Elfin, Peach Sandstorm<\/td>SHAPESHIFT, DROPSHOT, TURNEDUP, NANOCORE, NETWIRE, ALFA Shell<\/td><\/tr>
APT32<\/a><\/td>Vietnam<\/td>SeaLotus, OceanLotus, APT-C-00, Canvas Cyclone, BISMUTH<\/td>SOUNDBITE, WINDSHIELD, PHOREAL, BEACON, KOMPROGO<\/td><\/tr>
APT31<\/a><\/td>China<\/td><\/td>SOGU, LUCKYBIRD, SLOWGYRO, DUCKFAT<\/td><\/tr>
APT30<\/a><\/td>China<\/td><\/td>SHIPSHAPE, SPACESHIP, FLASHFLOOD<\/td><\/tr>
APT29<\/a><\/td>Russia<\/td>IRON RITUAL, IRON HEMLOCK, NobleBaron, Dark Halo, StellarParticle, NOBELIUM, UNC2452, YTTRIUM, The Dukes, Cozy Bear, CozyDuke, SolarStorm, Blue Kitsune, UNC3524, Midnight Blizzard<\/td><\/td><\/tr>
APT28<\/a><\/td>Russia<\/td>IRON TWILIGHT, SNAKEMACKEREL, Swallowtail, Group 74, Sednit, Sofacy, Pawn Storm, Fancy Bear, STRONTIUM, Tsar Team, Threat Group-4127, TG-4127, Forest Blizzard, FROZENLAKE<\/td>CHOPSTICK, SOURFACE<\/td><\/tr>
APT27<\/a><\/td>China<\/td><\/td>PANDORA, SOGU, ZXSHELL, GHOST, WIDEBERTH, QUICKPULSE, FLOWERPOT<\/td><\/tr>
APT26<\/a><\/td>China<\/td><\/td>SOGU, HTRAN, POSTSIZE, TWOCHAINS, BEACON<\/td><\/tr>
APT25<\/a><\/td>China<\/td>Uncool, Vixen Panda, Ke3chang, Sushi Roll, Tor <\/td>LINGBO, PLAYWORK, MADWOFL, MIRAGE, TOUGHROW, TOYSNAKE, SABERTOOTH<\/td><\/tr>
APT24<\/a><\/td>China<\/td>PittyTiger<\/td>PITTYTIGER, ENFAL, TAIDOOR<\/td><\/tr>
APT23<\/a><\/td>China<\/td><\/td>NONGMIN<\/td><\/tr>
APT22<\/a><\/td>China<\/td>Barista<\/td>PISCES, SOGU, FLATNOTE, ANGRYBELL, BASELESS, SEAWOLF, LOGJAM<\/td><\/tr>
APT21<\/a><\/td>China<\/td>Zhenbao<\/td>SOGU, TEMPFUN, Gh0st, TRAVELNET, HOMEUNIX, ZEROTWO<\/td><\/tr>
APT20<\/a><\/td>China<\/td>Twivy<\/td>QIAC, SOGU, Gh0st, ZXSHELL, Poison Ivy, BEACON, HOMEUNIX, STEW<\/td><\/tr>
APT19<\/a><\/td>China<\/td>Codoso, C0d0so0, Codoso Team, Sunshop Group<\/td>BEACON, COBALTSTRIKE<\/td><\/tr>
APT18<\/a><\/td>China<\/td>Wekby, TG-0416, Dynamite Panda, Threat Group-0416<\/td>Gh0st RAT<\/td><\/tr>
APT17<\/a><\/td>China<\/td>Tailgator Team, Deputy Dog<\/td>BLACKCOFFEE<\/td><\/tr>
APT16<\/a><\/td>China<\/td><\/td>IRONHALO, ELMER<\/td><\/tr>
APT15<\/a><\/td>China<\/td><\/td>ENFAL, BALDEAGLE, NOISEMAKER, MIRAGE<\/td><\/tr>
APT14<\/a><\/td>China<\/td><\/td>Gh0st, POISONIVY, CLUBSEAT, GROOVY<\/td><\/tr>
APT12<\/a><\/td>China<\/td>Calc Team, IXESHE, DynCalc, Numbered Panda, DNSCALC<\/td>RIPTIDE, HIGHTIDE, THREBYTE, WATERSPOUT<\/td><\/tr>
APT10<\/a><\/td>China<\/td>Menupass Team<\/td>HAYMAKER, SNUGRIDE, BUGJUICE, QUASARRAT<\/td><\/tr>
APT9<\/a><\/td>China<\/td><\/td>SOGU, HOMEUNIX, PHOTO, FUNRUN, Gh0st, ZXSHEL<\/td><\/tr>
APT8<\/a><\/td>China<\/td><\/td>HASH, FLYZAP, GOLFPRO, SAFEPUTT<\/td><\/tr>
APT7<\/a><\/td>China<\/td><\/td>DIGDUG, TRACKS<\/td><\/tr>
APT6<\/a><\/td>China<\/td><\/td>BELUGA, EXCHAIN, PUPTENT<\/td><\/tr>
APT5<\/a><\/td>China<\/td>Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD, Keyhole Panda, UNC2630<\/td>BRIGHTCREST, SWEETCOLA, SPIRITBOX, PALEJAB, WIDERIM, WINVAULT, HAPPYSAD, BIRDWORLD, FARCRY, CYFREE, FULLSILO, HELLOTHEWORLD, HAZELNUT, GIF89A, SCREENBIND, SHINYFUR, TRUCKBED, LEOUNCIA, FREESWIM, PULLTAB, HIREDHELP, NEDDYHORSE, PITCHFORK, BRIGHTCOMB, ENCORE, TABCTENG, SHORTLEASH, CLEANACT, BRIGHTCYAN, DANCEPARTY, HALFBACK, PUSHBACK, COOLWHIP, LOWBID, TIGHTROPE, DIRTYWORD, AURIGA, KEYFANG, Poison Ivy<\/td><\/tr>
APT4<\/a><\/td>China<\/td>Maverick Panda, Sykipot Group, Wisp<\/td>GETKYS, LIFESAVER, CCHIP, SHYLILT, SWEETTOOTH, PHOTO, SOGO<\/td><\/tr>
APT3<\/a><\/td>China<\/td>Gothic Panda, Pirpi, UPS Team, Buckeye, Threat Group-0110, TG-0110<\/td>SHOTPUT, COOKIECUTTER, SOGU<\/td><\/tr>
APT2<\/a><\/td>China<\/td><\/td>MOOSE, WARP<\/td><\/tr>
APT1<\/a><\/td>China<\/td>Unit 61398, Comment Crew, Comment Group, Comment Panda<\/td>TROJAN.ECLTYS, BACKDOOR.BARKIOFORK, BACKDOOR.WAKEMINAP, TROJAN.DOWNBOT, BACKDOOR.DALBOT, BACKDOOR.REVIRD, TROJAN.BADNAME, BACKDOOR.WUALESS<\/td><\/tr><\/tbody><\/table>
Advanced Persistent Threats as described by https:\/\/www.mandiant.com\/resources\/insights\/apt-groups<\/a> and Groups | MITRE ATT&CK\u00ae<\/a><\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"

APT Suspected Associated groups Associated malware APT41 China Wicked Panda, Brass Typhoon, BARIUM APT40 China BADSIGN, FIELDGOAL, FINDLOCK, PHOTO, SCANBOX, SOGU, WIDETONE APT39 Iran ITG07, Chafer, Remix Kitten SEAWEED, CACHEMONEY, POWBAT APT38 North Korea NICKEL GLADSTONE, BeagleBoyz, Bluenoroff, Stardust Chollima, Sapphire Sleet, COPERNICIUM APT37 North Korea InkySquid, ScarCruft, Reaper, Group123,…<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-372","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/pages\/372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=372"}],"version-history":[{"count":4,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/pages\/372\/revisions"}],"predecessor-version":[{"id":672,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/pages\/372\/revisions\/672"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}