HAFNIUM
Operation Exchange MarauderSilk Typhoon
UnattributedNo public state or group attribution on record
HAFNIUM is a likely state-sponsored cyber espionage group operating out of China that has been active since at least January 2021. HAFNIUM primarily targets entities in the US across a number of industry sectors, including infectious disease researchers, law firms, higher education institutions, defense contractors, policy think tanks, and NGOs.
MITRE ATT&CK Techniques
T1003.001T1003.003T1005T1016T1016.001T1018T1033T1057T1059.001T1059.003T1068T1071.001T1078.003T1078.004T1083T1095T1098T1105T1110.003T1114.002T1119T1132.001T1136.002T1190T1199T1213.002T1218.011T1505.003T1530T1550.001T1555.006T1560.001T1564.001T1567.002T1583.003T1583.005T1583.006T1584.005T1589.002T1590T1590.005T1592.004T1593.003T1685.005
Associated Malware
ASPXSpyChina ChopperCovenantImpacketPsExecTarrask
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.