Threat actor · G0093

GALLIUM

Granite Typhoon

UnattributedNo public state or group attribution on record

GALLIUM is a cyberespionage group that has been active since at least 2012, primarily targeting telecommunications companies, financial institutions, and government entities in Afghanistan, Australia, Belgium, Cambodia, Malaysia, Mozambique, the Philippines, Russia, and Vietnam. This group is particularly known for launching Operation Soft Cell, a long-term campaign targeting telecommunications providers.

MITRE ATT&CK Techniques

Associated Malware

BlackMouldChina ChopperHTRANMimikatzNBTscanNetPingPingPullPlugXPoisonIvyPsExecRegWindows Credential Editoratcmdipconfig

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.