Actors/Nation-state / APT/Asia

APT2

G0024APTCN · China

AKA MSUpdater Team · PLA Unit 61486 · Group 36

CrowdStrike: PUTTER PANDASecureworks: TG-6952MITRE: G0024

Targets6

Sectors5

Threat types1

GIRs covered0/480

Active since2010

Also tracked as

4 vendor names · 3 other aliases

Open Rosetta Stone

CrowdStrike

PUTTER PANDA

Mandiant

APT2

MITRE

G0024

Secureworks

TG-6952

UNATTRIBUTED ALIASESMSUpdater TeamPLA Unit 61486Group 36

Victimology

Geographic footprint · 6 countries

origin · Chinatargeted countries · 6

EUROPE · 2

France · Italy

ASIA · 3

Japan · South Korea · Taiwan

AMERICAS · 1

United States

Sectors targeted

5 of 40

Government100 actors Aerospace59 actors Technology60 actors Telecom72 actors Private Sector (generic)29 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 3 techniques

Persistence · 1

T1547.001Registry Run Keys / Startup Folder

Defense Impairment · 1

T1685Disable or Modify Tools

Stealth · 1

T1055.001Dynamic-link Library Injection

GIR coverage

0 / 480 requirements satisfied

Open matrix

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer3 techniques · layer format 4.5

Related actors

By origin and actor type