🇨🇳

SOLAR SPIDER

APT Group 6 zero-day CVEs ETDA ✓

Also Known As

No alias recorded

Target Countries 1

Countries highlighted in red

India

Sectors Targeted

Commercial Banking 52211

Details

Origin 🇨🇳 CN
Last Updated 01 Jun 2022

MITRE ATT&CK 35

T1003 - OS Credential Dumping T1018 - Remote System Discovery T1021 - Remote Services T1027 T1036 T1041 - Exfiltration Over C2 Channel T1059 T1070 T1071.001 T1078 - Valid Accounts T1087 - Account Discovery T1089 T1105 T1107 T1110 - Brute Force T1112 T1113 T1119 - Automated Collection T1122 T1124 T1133 - External Remote Services T1219 - Remote Access Software T1486 - Data Encrypted for Impact T1490 - Inhibit System Recovery T1548 - Abuse Elevation Control Mechanism T1555 - Credentials from Password Stores T1556 - Modify Authentication Process T1557 - Man-in-the-Middle T1560 - Archive Collected Data T1565 - Data Manipulation T1566 - Phishing T1570 - Lateral Tool Transfer T1586 - Compromise Accounts T1592 - Gather Victim Host Information T1598 - Phishing for Information

Related Zero-Days 6

CVE-2025-13223 CVE-2025-2783 CVE-2025-29824 CVE-2025-4427 CVE-2025-58034 CVE-2025-61882