🇨🇳

Earth Baxia

APT Group Information theft and espionage 4 zero-day CVEs ETDA ✓

Also Known As

No alias recorded

Target Countries 7

Countries highlighted in red

China Japan Republic of Korea Philippines Thailand Province of China Taiwan Vietnam

Details

Origin 🇨🇳 CN
Last Updated 23 Sep 2024

MITRE ATT&CK 60

T1021.002 - SMB/Windows Admin Shares T1027 - Obfuscated Files or Information T1027-Obfuscated Files or Information T1036.004 - Masquerade Task or Service T1036.004-Masquerade Task or Service T1041 - Exfiltration Over C2 Channel T1055 - Process Injection T1055-Process Injection T1056 - Input Capture T1059 - Command and Scripting Interpreter T1059.001 - PowerShell T1059.001-PowerShell T1068 - Exploitation for Privilege Escalation T1070.004 - File Deletion T1071 - Application Layer Protocol T1071.001 - Web Protocols T1071.001-Web Protocols T1071.003 - Mail Protocols T1071.003-Mail Protocols T1071.004 - DNS T1071.004-DNS T1078 - Valid Accounts T1102 - Web Service T1102.002 - Bidirectional Communication T1102.002-Bidirectional Communication T1106 - Native API T1127 - Trusted Developer Utilities Proxy Execution T1140 - Deobfuscate/Decode Files or Information T1140-Deobfuscate T1190 - Exploit Public-Facing Application T1190-Exploit Public T1218.011 - Rundll32 T1486 - Data Encrypted for Impact T1490 - Inhibit System Recovery T1543.003 - Windows Service T1547 - Boot or Logon Autostart Execution T1547.009 - Shortcut Modification T1547.009-Shortcut Modification T1553 - Subvert Trust Controls T1562.001 - Disable or Modify Tools T1566 - Phishing T1566.001 - Spearphishing Attachment T1566.001-Spearphishing Attachment T1566.002 - Spearphishing Link T1570 - Lateral Tool Transfer T1573 - Encrypted Channel T1573.001 - Symmetric Cryptography T1573.001-Symmetric Cryptography T1574 - Hijack Execution Flow T1574.002 - DLL Side-Loading T1584.006 - Web Services T1584.006-Web Services T1587.001 - Malware T1587.001-Malware T1587.003 - Digital Certificates T1587.003-Digital Certificates T1588.001 - Malware T1588.001-Malware T1588.002 - Tool T1588.002-Tool