PurpleHaze
Suspected sponsor: ChinaPurpleHaze is a China-nexus threat actor tracked by SentinelLABS, linked to APT15, known for targeting critical infrastructure sectors such as telecommunications and government organizations. The actor has been associated with reconnaissance attempts against SentinelOne and has utilized ShadowPad, a modular backdoor platform, for cyberespionage and potential ransomware deployment. Investigations are ongoing to determine overlaps between ShadowPad intrusions and PurpleHaze activity, highlighting the extensive sharing of malware and operational practices among Chinese threat groups. The targeting of third-party service providers has raised significant concerns regarding operational security and supply chain monitoring.
Profiles whose description names this actor, that this description names, or that share one of its names. The sources mention them together; they are not necessarily the same group.
- No incident in the register is attributed to this actor.
- No Asia-Pacific article names this actor yet.