Threat actor · G0018

admin@338

UnattributedNo public state or group attribution on record

admin@338 is a China-based cyber threat group. It has previously used newsworthy events as lures to deliver malware and has primarily targeted organizations involved in financial, economic, and trade policy, typically using publicly available RATs such as PoisonIvy, as well as some non-public backdoors.

MITRE ATT&CK Techniques

T1007 T1016 T1036.005 T1049 T1059.003 T1069.001 T1082 T1083 T1087.001 T1203 T1204.002 T1566.001

Associated Malware

BUBBLEWRAPLOWBALLNetPoisonIvySysteminfoipconfignetstat

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.