APT1
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
PLA Unit 61398 (Chinese: 61398部队, Pinyin: 61398 bùduì) is the Military Unit Cover Designator (MUCD)[1] of a People's Liberation Army advanced persistent threat unit that has been alleged to be a source of Chinese computer hacking attacks
Source-reported aliases: COMMENT PANDA, PLA Unit 61398, Comment Crew, Byzantine Candor, Group 3, TG-8223, Comment Group, Brown Fox, GIF89a, ShadyRAT, G0006. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
United States of America · 
Taiwan · 
Israel · 
Norway · 
United Arab Emirates · 
United Kingdom · 
Singapore · 
India · 
Belgium · 
South Africa · 
Switzerland · 
Canada · 
France · 
Luxembourg · 
Japan
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://en.wikipedia.org/wiki/PLA_Unit_61398
https://www.cfr.org/interactive/cyber-operations/pla-unit-61398
https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf
https://www.mcafee.com/enterprise/en-us/assets/reports/rp-operation-oceansalt.pdf
https://attack.mitre.org/groups/G0006/
https://www.nytimes.com/2014/05/20/us/us-to-charge-chinese-workers-with-cyberspying.html
https://www.mandiant.com/resources/insights/apt-groups