{"actor":{"id":"apt49","name":"APT49","aliases":[],"vendor_names":{"mandiant":"APT49"},"mitre_gid":null,"type":"nation-state","type_verbatim":"State-sponsored APT","secondary_types":[],"origin":null,"origins":["XX"],"targets":[],"target_regions":[],"sectors":[],"threat_types":[],"mitre_techniques":[],"gir_codes":[],"active_since":null,"brief":"APT49 is a state-sponsored advanced persistent threat group tracked by Mandiant, though limited public reporting exists under this specific designation. The group's primary motivation is espionage, consistent with nation-state objectives focused on intelligence collection rather than financial gain. Specific targeting patterns, victimology, and origin country remain insufficiently documented in open-source reporting to characterize with confidence.","attribution_sponsor":null,"attribution_confidence":null,"merged_into":null,"split_from":[],"created_at":"2026-05-20T09:50:18.859089+00:00","updated_at":"2026-05-20T15:14:44.711+00:00","url":"https://aptatlas.net/actors/apt49"},"exports":{"stix":"https://aptatlas.net/api/v1/actors/apt49/stix","navigator":"https://aptatlas.net/api/v1/actors/apt49/navigator"}}