{"actor":{"id":"apt1","name":"APT1","aliases":["Comment Crew","Byzantine Candor","GIF89a","PLA Unit 61398","Brown Fox","Comment Group","TG-8223"],"vendor_names":{"mandiant":"APT1","mitre":"G0006","crowdstrike":"COMMENT PANDA","secureworks":"IRON PANDA"},"mitre_gid":"G0006","type":"nation-state","type_verbatim":"nation-state APT","secondary_types":[],"origin":"CN","origins":["CN"],"targets":["AE","BE","CA","CH","DK","FR","GB","IL","IN","IT","JP","LU","NO","SG","TW","US","ZA"],"target_regions":[],"sectors":["ret","hea","pharmaceutical","transportation","industrials-engineering","tec","gov","food-and-beverage","energy-utilities","tel","fin","chemicals","aerospace","med","private-sector-generic"],"threat_types":["esp"],"mitre_techniques":["T1003.001","T1005","T1007","T1016","T1021.001","T1036.005","T1049","T1057","T1059.003","T1114.001","T1114.002","T1119","T1135","T1550.002","T1560.001","T1566.001","T1566.002"],"gir_codes":[],"active_since":2006,"brief":"PLA Unit 61398 cyber-espionage group; subject of the 2013 Mandiant APT1 report.","attribution_sponsor":null,"attribution_confidence":null,"merged_into":null,"split_from":[],"created_at":"2026-05-20T08:48:21.79626+00:00","updated_at":"2026-08-03T17:53:09.469+00:00","url":"https://aptatlas.net/actors/apt1"},"exports":{"stix":"https://aptatlas.net/api/v1/actors/apt1/stix","navigator":"https://aptatlas.net/api/v1/actors/apt1/navigator"}}