.svg?width=93&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=7&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
Filter by
Threat profiles
Explore the latest threat group definitions and profiles published by the
Sophos® Counter Threat Unit™ (CTU) Research Team.
Showing 41-50 of 197 profiles
| Name | Location | Objectives | Aliases | Tools |
|---|---|---|---|---|
 China | Espionage | Cinnamon Tempest (Microsoft), DEV-0401 (Microsoft), Emperor Dragonfly (Sygnia) | AtomSilo, Cobalt Strike, HUI Loader, Impacket, LockFile, NightSky, Pandora, PlugX, Rook | |
| China | Espionage, Surveillance | Earth Estries (Trend Micro), Famous Sparrow (ESET), Ghost Emperor (Kaspersky), RedMike (Recorded Future), Salt Typhoon (Microsoft) | ||
| China | Espionage | APT27 (FireEye), Bowser, Budworm (Symantec), Circle Typhoon (Microsoft), Emissary Panda (CrowdStrike), Group35, Iron Tiger (Trend Micro), Linen Typhoon (Microsoft), Lucky Mouse (Kaspersky), Temp.Hippo (FireEye), TG-3390 (SCWX CTU) | 9002, AbcShell, ASPXSpy, China Chopper, Chropper for jsp, EAGERBEE, Enfal, GetPassword, Gh0st RAT, GNY Shell, Godzilla Webshell, HttpBrowser, Hunter, HyperBro, Kekeo, Mimikatz, OwaAuth, PCShare, PhantomNet, PlugX, PoisonIvy, PwDump, RCMD, ReGeorg, Remcos, RootTows, Sysupdate, UDTRAT, Warzone RAT, Wonknu, Wrapikatz, ZxShell | |
| China | Espionage | Aquatic Panda, Aquatic Panda (Crowdstrike), Charcoal Typhoon, Charcoal Typhoon (Microsoft), CHROMIUM, CHROMIUM (Microsoft), Earth Lusca, Earth Lusca (Trend Micro), FISHMONGER, FISHMONGER (ESET), Red Dev 10, Red Dev 10 (PWC), Red Scylla, Red Scylla (PWC), RedHotel, RedHotel (Recorded Future), Tag-22, Tag-22 (Recorded Future) | Brute Ratel C4, Cobalt Strike, Fishmaster, FunnySwitch, njRAT, ShadowPad, SprySOCKS, Spyder | |
| China | Espionage | Chimera (Cycraft), DEV-0039 (Microsoft), Thorium (Microsoft), Tumbleweed Typhoon (Microsoft) | AceHash, CloudDrop, Cobalt Strike, Mimikatz, Sharphound, STOCKPIPE, Watercycle | |
| China | Espionage | APT31 (FireEye), BRONZE EXPRESS (Secureworks), Judgment Panda (CrowdStrike), Red Keres, TA412, VINEWOOD (Secureworks), Violet Typhoon (Microsoft), ZIRCONIUM (Microsoft) | BlueMoon, DropboxAES RAT, HanaLoader, Metasploit, Mimikatz, Reverse ICMP shell, Trochilus | |
| China | Espionage | APT31 (FireEye), BRONZE EXPRESS (Secureworks), Judgment Panda (CrowdStrike), Red Keres, TA412, VINEWOOD (Secureworks), Violet Typhoon (Microsoft), ZIRCONIUM (Microsoft) | BlueMoon, DropboxAES RAT, HanaLoader, Metasploit, Mimikatz, Reverse ICMP shell, Trochilus | |
| China | Espionage | CTG-2810 (SCWX CTU), Mofang (Fox-IT) | ShimRat, Superman | |
| China | Espionage | CTG-7273 (SCWX CTU), Roaming Tiger (ESET), Rotten Tomato (Sophos) | Appat, BbsRAT, PlugX, Zbot | |
Unattributed | Data Theft, Disruption, Espionage | Gonjeshke Darande, Indra, Predatory Sparrow |