🇨🇳

Curious Gorge

APT Group Information theft and espionage ETDA ✓

Also Known As 1 names

UNC3742

Target Countries 4

Countries highlighted in red

Kazakhstan Mongolia Russian Federation Ukraine

Sectors Targeted

Public Administration 92 Couriers and Express Delivery Services 492110 Publishing Industries (except Internet) 511 Government Logistics Commercial Banking 52211 NAICS:48 48 Military Periodical Publishers 51112 Space Research and Technology 927 Defense Defense Contractor National Security and International Affairs 928 NAICS:31 31

Details

Origin 🇨🇳 CN

Last Updated 01 Jun 2022

MITRE ATT&CK 4

T1071.001 T1078 T1543.003 T1566.001

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 1 entries

Curious Gorge Google

Observed Target Countries 4

Based on ETDA data — countries highlighted in red

Kazakhstan Mongolia Russia Ukraine

Description

(Google) A group TAG attributes to China's PLA SSF, has conducted campaigns against government and military organizations in Ukraine, Russia, Kazakhstan, and Mongolia. While this activity largely does not impact Google products, we remain engaged and are providing notifications to victim organizations.

Operations 1

2022-04 Curious Gorge, a group TAG attributes to China's PLA SSF, has remained active against government, military, logistics and manufacturing organizations in Ukraine, Russia and Central Asia. https://blog.google/threat-analysis-group/update-on-cyber-activity-in-eastern-europe/

Reports & References 1

https://blog.google/threat-analysis-group/tracking-cyber-activity-eastern-europe/

ETDA Profile

Curious Gorge

Origin

China

First Seen 2022

Sponsor State-sponsored, PLA SSF

Motivation

Information theft and espionage

View on ETDA APT Groups ↗