APT15
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
This threat actor uses phishing techniques to compromise the networks of foreign ministries of European countries for espionage purposes.
Source-reported aliases: VIXEN PANDA, Ke3Chang, Playful Dragon, Metushy, Lurid, Social Network Team, Royal APT, BRONZE PALACE, BRONZE DAVENPORT, BRONZE IDLEWOOD, NICKEL, G0004, Red Vulture, Nylon Typhoon, Mirage, RIVER CASTLE. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
India · 
United Kingdom · 
Germany
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://github.com/nccgroup/Royal_APT
https://www.cfr.org/interactive/cyber-operations/mirage
https://unit42.paloaltonetworks.com/operation-ke3chang-resurfaces-with-new-tidepool-malware/
https://www.intezer.com/miragefox-apt15-resurfaces-with-new-tools-based-on-old-ones/
https://attack.mitre.org/groups/G0004/
https://www.secureworks.com/research/threat-profiles/bronze-palace
https://www.mandiant.com/resources/insights/apt-groups
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWMFIi
https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system/