APT17
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
FireEye described APT17 in a 2015 report as: 'APT17, also known as DeputyDog, is a China based threat group that FireEye Intelligence has observed conducting network intrusions against U.S. government entities, the defense industry, law firms, information technology companies, mining companies, and non-government organizations.'
Source-reported aliases: Group 8, AURORA PANDA, Hidden Lynx, Tailgater Team, Dogfish, BRONZE KEYSTONE, G0025, Group 72, G0001, Axiom, HELIUM, Heart Typhoon. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): United States of America ·
Netherlands ·
Italy ·
Japan ·
United Kingdom ·
Belgium ·
Russia ·
Indonesia ·
Germany ·
Switzerland ·
China
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2013/hidden_lynx.pdf
https://www.cfr.org/interactive/cyber-operations/apt-17
https://www.carbonblack.com/2013/02/08/bit9-and-our-customers-security/
https://www.recordedfuture.com/hidden-lynx-analysis/
https://www.secureworks.com/research/threat-profiles/bronze-keystone
https://attack.mitre.org/groups/G0025/
https://cfr.org/cyber-operations/axiom
https://attack.mitre.org/groups/G0001/
https://www.youtube.com/watch?v=NFJqD-LcpIg
https://www.mandiant.com/resources/insights/apt-groups