APT12

Overview

APT12 is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.

Targets

Government · Private sector

Regions

Japan · Taiwan

Capabilities

• Exploitation of public-facing / client applications — ATT&CK T1203

TTPs — 5 techniques across 3 tactics

Tools & malware (3)

Ixeshe · RIPTIDE · HTRAN

Reporting (2)

• Darwin’s Favorite APT Group [Blog] — Moran, N., Oppenheim, M., Engle, S., & Wartell, R.
• Whois Numbered Panda — Meyers, A