Actors/Nation-state / APT/Asia

APT18

APTCN · China

AKA Wekby

CrowdStrike: DYNAMITE PANDAMicrosoft: SCANDIUMSecureworks: TG-0416

Targets16

Sectors9

Threat types1

GIRs covered0/480

Active since2009

Victimology

Geographic footprint · 16 countries

origin · Chinatargeted countries · 16

ASIA · 4

AMERICAS · 2

EUROPE · 10

9 of 40

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 9 techniques

Execution · 2

Persistence · 1

Discovery · 1

Command And Control · 3

Stealth · 2

0 / 480 requirements satisfied

No GIRs mapped yet for this actor.

By origin and actor type

T1547.001

Registry Run Keys / Startup Folder

T1105

Ingress Tool Transfer