Threat actor · G0098

BlackTech

Palmerworm

UnattributedNo public state or group attribution on record

BlackTech is a suspected Chinese cyber espionage group that has primarily targeted organizations in East Asia--particularly Taiwan, Japan, and Hong Kong--and the US since at least 2013. BlackTech has used a combination of custom malware, dual-use tools, and living off the land tactics to compromise media, construction, engineering, electronics, and financial company networks.

MITRE ATT&CK Techniques

T1021.004 T1036.002 T1046 T1106 T1190 T1203 T1204.001 T1204.002 T1566.001 T1566.002 T1574.001 T1588.002 T1588.003 T1588.004

Associated Malware

FlagproKivarsPLEADPsExecTSCookieWaterbear

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.