APT18

Techniques (MITRE ATT&CK)12

SourceMITRE ATT&CK

Also known as:TG-0416Dynamite PandaThreat Group-0416

Vexday analysis

APT18 (também identificado como TG-0416, Dynamite Panda e Threat Group-0416) é um grupo de ameaça persistente avançada rastreado pelo MITRE ATT&CK sob o identificador G0026, com atividade documentada desde pelo menos 2009. O grupo tem como alvos setores variados, incluindo tecnologia, manufatura, organizações de direitos humanos, governo e área médica. Sua atuação é mapeada por 12 técnicas no framework MITRE ATT&CK.

Techniques (MITRE ATT&CK) 12

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Execution

At Windows Command Shell

Persistence

External Remote Services Registry Run Keys / Startup Folder

Discovery

System Information Discovery File and Directory Discovery

Command and control

Web Protocols DNS Ingress Tool Transfer

stealth

Encrypted/Encoded File File Deletion Valid Accounts

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

APT18 uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →