.svg?width=93&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=7&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
Filter by
Threat profiles
Explore the latest threat group definitions and profiles published by the
Sophos® Counter Threat Unit™ (CTU) Research Team.
Showing 31-40 of 197 profiles
| Name | Location | Objectives | Aliases | Tools |
|---|---|---|---|---|
 China | Espionage | meterpreter | ||
| China | Espionage | meterpreter | ||
| China | Data Theft, Espionage, Surveillance | HAFNIUM (Microsoft), Murky Panda (Crowdstrike), Silk Typhoon (Microsoft) | ChinaChopper, Godzilla Webshell | |
| China | Espionage, Surveillance | DecisiveArchitect (Crowdstrike), Earth Bluecrow (Trend Micro), Red Menshen (PWC) | BPFDoor, Sliver, TinyShell | |
| China | Espionage, Surveillance | DecisiveArchitect (Crowdstrike), Earth Bluecrow (Trend Micro), Red Menshen (PWC) | BPFDoor, Sliver, TinyShell | |
| China | Espionage | Dev-0391 (Microsoft), Insidious Taurus (Palo Alto), UNC3236 (Google), Vanguard Panda (Crowdstrike), Volt Typhoon (Microsoft), Voltzite (Dragos) | Living-off-the-land binaries, Web shells | |
| China | Espionage | UNC5174 (Google) | Metasploit, Sliver, SNOWLIGHT, SUPERSHELL, VShell | |
| China | Espionage | SUPERNOVA | ||
| China | Espionage, Financial Gain | UNC302 | China Chopper, Mimikatz, OwaAuth | |
| China | Espionage, Financial Gain | UNC302 | China Chopper, Mimikatz, OwaAuth |