🇨🇳

NetTraveler

APT Group Information theft and espionage 6 zero-day CVEs ETDA ✓

Also Known As 4 names

HAMMER PANDA TEMP.Zhenbao APT21 APT 21

Target Countries 14

Countries highlighted in red

Canada Chile China Germany Spain United Kingdom India Kyrgyzstan Republic of Korea Kazakhstan Morocco Mongolia Tajikistan United States

Sectors Targeted

Military Government

Details

Origin 🇨🇳 CN
Last Updated 01 Jun 2022

Malware Families 6

dreambot
snifula
ldr4
saigon
vawtrak
gozi

MITRE ATT&CK 90

T1001 - Data Obfuscation T1003 T1005 T1007 T1008 T1010 - Application Window Discovery T1011 T1012 T1016 T1021 T1027 - Obfuscated Files or Information T1033 T1036 T1041 T1047 T1048 T1049 T1053 T1055 T1057 T1059 T1059.001 T1059.003 T1060 T1070 T1071 T1071.001 T1078 T1081 T1082 T1083 T1085 T1087 T1090 T1095 T1102 T1105 T1106 - Native API T1110 T1112 T1114 T1114.001 T1115 T1119 T1120 T1124 T1127 T1130 T1132 T1133 T1136 T1137 T1140 - Deobfuscate/Decode Files or Information T1170 T1176 T1190 T1204 - User Execution T1204.002 T1217 T1218 - Signed Binary Proxy Execution T1485 T1486 T1489 T1490 - Inhibit System Recovery T1497 T1497.003 T1498 - Network Denial of Service T1503 T1518 T1529 T1530 T1531 T1539 T1543 T1547 T1550 T1552 T1553 - Subvert Trust Controls T1555 T1560 T1561 T1562 T1562.001 T1566 - Phishing T1566.001 T1571 T1573 T1583 T1587 T1595

Related Zero-Days 6

CVE-2017-0147 CVE-2018-8174 CVE-2020-1472 CVE-2022-42475 CVE-2023-36884 CVE-2023-38831