QUILTED TIGER
No sourced public emblem in this profile.
reference profile · reported nexus: IN (not nationality)
Dropping Elephant (also known as “Chinastrats” and “Patchwork“) is a relatively new threat actor that is targeting a variety of high profile diplomatic and economic targets using a custom set of attack tools. Its victims are all involved with China’s foreign relations in some way, and are generally caught through spear-phishing or watering hole attacks.
Source-reported aliases: Chinastrats, Patchwork, Monsoon, Sarit, Dropping Elephant, APT-C-09, ZINC EMERSON, ATK11, G0040, Orange Athos, Thirsty Gemini. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): Bangladesh ·
Sri Lanka ·
Pakistan
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://www.forcepoint.com/blog/x-labs/monsoon-analysis-apt-campaign
https://www.cymmetria.com/patchwork-targeted-attack/
https://s3-us-west-2.amazonaws.com/cymmetria-blog/public/Unveiling_Patchwork.pdf
https://www.volexity.com/blog/2018/06/07/patchwork-apt-group-targets-us-think-tanks/
https://attack.mitre.org/groups/G0040/
https://documents.trendmicro.com/assets/tech-brief-untangling-the-patchwork-cyberespionage-group.pdf
https://securelist.com/the-dropping-elephant-actor/75328/
https://www.secureworks.com/research/threat-profiles/zinc-emerson
https://unit42.paloaltonetworks.com/atoms/thirstygemini/