Reconnaissance Scanning Tools Used by Chinese Threat Actors and Those Available in Open Source
Tags
country: China Germany Japan South Korea
maec-delivery-vectors: Watering Hole
attack-pattern: Domain Groups - T1069.002 Exploits - T1587.004 Exploits - T1588.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002
Show in Graph
Common Information
Type Value
UUID 89a8c0ea-9645-4b46-bb3d-61171a939e56
Fingerprint b1d0d89586173ebc
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 4, 2024, 4:11 p.m.
Added to db Sept. 4, 2024, 6:24 p.m.
Last updated Nov. 17, 2024, 9:42 p.m.
Headline Reconnaissance Scanning Tools Used by Chinese Threat Actors and Those Available in Open Source
Title Reconnaissance Scanning Tools Used by Chinese Threat Actors and Those Available in Open Source
Detected Hints/Tags/Attributes 131/3/11
Source URLs
Redirection Url
Details Source https://malware.news/t/reconnaissance-scanning-tools-used-by-chinese-threat-actors-and-those-available-in-open-source/86021
URL Provider
Details Provider Source level domain
Details malware.news malware.news
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
forum.ywhack.com
Details File 1205 
index.php
Details Mandiant Temporary Group Assumption 44 
TEMP.PERISCOPE
Details Mandiant Temporary Group Assumption 16 
TEMP.JUMPER
Details Threat Actor Identifier - APT 522 
APT41
Details Threat Actor Identifier - APT 278 
APT10
Details Threat Actor Identifier - APT 143 
APT40
Details Threat Actor Identifier - APT 78 
APT3
Details Threat Actor Identifier - APT 297 
APT27
Details Threat Actor Identifier by Unit 42 4 
CL-STA-0044
Details Url 1 
https://forum.ywhack.com/index.php