Atlas Actors147 Names508 Sectors40 Requirements480

⌘K

Atlas Actors147 Names508 Sectors40 Requirements480

Donot Team (aka Donot Team, APT-C-35) · APT Atlas

Actors/Nation-state / APT/Asia

Donot Team

G0090APTIN · India

AKA APT-C-35 · Origami Elephant · Brainworm · SectorE02

ESET: DonotMicrosoft: QuillinCrowdStrike: VICEROY TIGERKaspersky: Donot APTMITRE: G0090Proofpoint: TA592

Targets18

Sectors10

Threat types1

GIRs covered0/480

Active since2016

QUICK FACTS

TypeNation-state / APT

OriginIndia

First seen2016

Type (verbatim)nation-state APT

GIR coverage0/480

TTPs0

Targets18

Sectors10

Last reviewed2026-08-03

Also tracked as

6 vendor names · 4 other aliases

Open Rosetta Stone

CrowdStrike

VICEROY TIGER

ESET

Donot

Kaspersky

Donot APT

Microsoft

Quillin

MITRE

G0090

Proofpoint

TA592

UNATTRIBUTED ALIASESAPT-C-35Origami ElephantBrainwormSectorE02

Victimology

Geographic footprint · 18 countries

origin · Indiatargeted countries · 18

ASIA · 12

United Arab Emirates · Afghanistan · China · India · Iran · Sri Lanka · Oman · Pakistan · Saudi Arabia · Singapore · Türkiye · Taiwan

OCEANIA · 1

Australia

AMERICAS · 2

Canada · United States

EUROPE · 3

United Kingdom · Norway · Russia

Sectors targeted

10 of 40

Government100 actors Defense72 actors Aerospace59 actors Financial Services74 actors Technology60 actors Telecom72 actors NGOs & Dissidents56 actors Media & Journalism49 actors Extractive Industries8 actors Dissidents (as targets)16 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

GIR coverage

0 / 480 requirements satisfied

Open matrix

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer0 techniques · layer format 4.5

Related actors

By origin and actor type

APT31nation-state

China · 6 targets · since 2013

APT8nation-state

China · 5 targets · since —

APT2nation-state

China · 6 targets · since 2010

APT24nation-state

China · 3 targets · since 2008

APT44nation-state

Russia · 25 targets · since 2009

APT21nation-state

China · 5 targets · since 2010