Threat actor · G0073

APT19

CodosoC0d0so0Codoso TeamSunshop Group

UnattributedNo public state or group attribution on record

APT19 is a Chinese-based threat group that has targeted a variety of industries, including defense, finance, energy, pharmaceutical, telecommunications, high tech, education, manufacturing, and legal services. In 2017, a phishing campaign was used to target seven law and investment firms. Some analysts track APT19 and Deep Panda as the same group, but it is unclear from open source information if the groups are the same.

MITRE ATT&CK Techniques

T1016 T1027.010 T1027.013 T1033 T1059 T1059.001 T1071.001 T1082 T1112 T1132.001 T1140 T1189 T1204.002 T1218.010 T1218.011 T1543.003 T1547.001 T1564.003 T1566.001 T1574.001 T1588.002

Associated Malware

Cobalt StrikeEmpire

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.