KINWILDER

Naikon

No sourced public emblem in this profile.

reference profile · reported nexus: CN (not nationality)

Kaspersky described Naikon in a 2015 report as: 'The Naikon group is mostly active in countries such as the Philippines, Malaysia, Cambodia, Indonesia, Vietnam, Myanmar, Singapore, and Nepal, hitting a variety of targets in a very opportunistic way.'

Source-reported aliases: PLA Unit 78020, OVERRIDE PANDA, Camerashy, BRONZE GENEVA, G0019, Naikon, BRONZE STERLING, G0013, NAIKON CASTLE. Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): India · Saudi Arabia · Vietnam · Myanmar · Singapore · Thailand · Malaysia · Cambodia · China · Philippines · South Korea · United States of America · Indonesia · Laos

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://securelist.com/analysis/publications/69953/the-naikon-apt/

https://www.fireeye.com/blog/threat-research/2014/03/spear-phishing-the-news-cycle-apt-actors-leverage-interest-in-the-disappearance-of-malaysian-flight-mh-370.html

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07205555/TheNaikonAPT-MsnMM1.pdf

https://usa.kaspersky.com/resource-center/threats/naikon-targeted-attacks

https://web.archive.org/web/20210925164035/https://blog.trendmicro.com/trendlabs-security-intelligence/bkdr_rarstone-new-rat-to-watch-out-for/

https://threatconnect.com/blog/tag/naikon/

https://attack.mitre.org/groups/G0019/

https://www.secureworks.com/research/threat-profiles/bronze-geneva

https://cyware.com/news/chinese-naikon-group-back-with-new-espionage-attack-66a8413d

https://cluster25.io/2022/04/29/lotus-panda-awake-last-strike/

https://www.mandiant.com/resources/insights/apt-groups

https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf

https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system/

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost