.svg?width=93&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=7&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
Filter by
Threat profiles
Explore the latest threat group definitions and profiles published by the
Sophos® Counter Threat Unit™ (CTU) Research Team.
Showing 11-20 of 197 profiles
| Name | Location | Objectives | Aliases | Tools |
|---|---|---|---|---|
 China | Espionage | CTG-8171 (SCWX CTU), Lotus Blossom (Palo Alto), Lotus Panda (CrowdStrike), Lstudio, Spring Dragon (Kaspersky) | Chrysalis, Cobalt Strike, Elise, Emissary Trojan, Lzari, Meterpreter | |
| China | Espionage, Financial Gain | TG-3279 (SCWX CTU), Wicked Spider (CrowdStrike) | Conpee, PlugX, PwDump | |
| China | Espionage | APT19 (FireEye), C0d0s0, Checkered Typhoon (Microsoft), Chlorine (Microsoft), Deep Panda (CrowdStrike), Pupa (Symantec), TG-3551 (SCWX CTU) | 9002, Alice's Rabbit Hole, Cobalt Strike, Derusbi, PlugX, PoisonIvy, PowerShell Empire, Trojan Briba, Zuguo | |
| China | Espionage | Ethereal Panda (Crowdstrike), Flax Typhoon (Microsoft) | Bad Potato, Juicy Potato, Metasploit, Mimikatz, SoftEther VPN | |
| China | Espionage | APT5 (FireEye), DPD (Palo Alto), Keyhole Panda (CrowdStrike), Mulberry Typhoon (Microsoft), Poisoned Flight (Kaspersky), TG-2754 (SCWX CTU) | Binanen, Comfoo, Gh0st RAT, Isastart, Leouncia, Marade, OrcaRAT, PCShare, Protux, Skeleton Key, SlyPidgin, VinSelf | |
| China | Espionage | APT30 (FireEye), BRONZE STERLING (SCWX CTU), CTG-5326 (SCWX CTU), Naikon (Kaspersky), Override Panda (CrowdStrike), RADIUM (Microsoft), Raspberry Typhoon | Lecna Downloader, Nebulae, ShadowPad | |
| China | Espionage | APT12 (FireEye), CTG-8223 (SCWX CTU), DyncCalc (Symantec), Numbered Panda (CrowdStrike), PortCalc | Badpuck, BeepService, Etumbot, Gh0st RAT, Ixeshe, Mswab, RAdmin, Seatran, SvcInstaller, Ziyang | |
| China | Espionage | Daggerfly, Daggerfly (Symantec), Evasive Panda (CrowdStrike), Evasive Panda (MalwareBytes), Storm Bamboo (Volexity) | Cobalt Strike, KsRemote, Macma, MgBot, Nightdoor, PlugX | |
| China | Espionage, Surveillance | APT23, Earth Centaur (Trend Micro), KeyBoy (CitizenLab), Pirate Panda (CrowdStrike), Red Orthrus (PWC), TA413 (Proofpoint), Tropic Trooper (Trend Micro) | Crowdoor, DSNGInstaller, KeyBoy, LOWZERO, Mofu, Pfine, Sepulcher, Xiangoop Loader, Yahaoyah | |
| China | Espionage | CactusPete (Kaspersky), Earth Akhlut (Trend Micro), Karma Panda (CrowdStrike), Red Beifang, Tonto Team | Bisonal, RatN, Royal Road, ShadowPad |