Cyber threats / Threat actors

APT40

CN Suspected sponsor: China · ATT&CK G0065
4
APAC targets
50
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: ATK29, BRONZE MOHAWK, G0065, GADOLINIUM, Gingham Typhoon, ISLAND CASTLE, ISLANDDREAMS, ITG09, KRYPTONITE PANDA, Leviathan, MUDCARP, Red Ladon, TA423, TEMP.Jumper, TEMP.Periscope

Leviathan is an espionage actor targeting organizations and high-value targets in defense and government. Active since at least 2014, this actor has long-standing interest in maritime industries, naval defense contractors, and associated research institutions in the United States and Western Europe.

ATT&CK techniques · 50
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Stealth
Defense Impairment
Credential Access
Lateral Movement
Collection
Command and Control
Exfiltration
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
Targets
Elsewhere: Belgium, Switzerland, Germany, United Kingdom, Norway, Saudi Arabia, United States
Sectors: Government, Private sector
Relevance to the EU
EU relevance: High
Targets EU member states (Belgium, Germany) as well as 4 Asia-Pacific countries
25 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
5
Development Cooperation
5
Infrastructure & Transport
3
Governance & Rule of Law
3
Education & Skills
3
Digital & ICT
2
Climate & Environment
2
Peace & Security
1
Threats to the EU →
References
Sources: MISP, MITRE