APT16
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
Between November 26, 2015, and December 1, 2015, known and suspected China-based APT groups launched several spear-phishing attacks targeting Japanese and Taiwanese organizations in the high-tech, government services, media and financial services industries. Each campaign delivered a malicious Microsoft Word document exploiting the aforementioned EPS dict copy use-after-free vulnerability, and the local Windows privilege escalation vulnerability CVE-2015-1701. The successful exploitation of both vulnerabilities led to the delivery of either a downloader that we refer to as IRONHALO, or a backdoor that we refer to as ELMER.
Source-reported aliases: SVCMONDR, G0023. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
Japan · 
Taiwan
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://www.fireeye.com/blog/threat-research/2015/12/the_eps_awakens.html
https://www.cfr.org/interactive/cyber-operations/apt-16
https://attack.mitre.org/groups/G0023
https://www.mandiant.com/resources/insights/apt-groups
https://securelist.com/analysis/publications/74828/cve-2015-2545-overview-of-current-threats/