Threat actor · G0045

menuPass

CicadaPOTASSIUMStone PandaAPT10Red ApolloCVNXHOGFISHBRONZE RIVERSIDE

ChinaMSS Tianjin State Security Bureau (US DOJ indictment, 2018)

menuPass is a threat group that has been active since at least 2006. Individual members of menuPass are known to have acted in association with the Chinese Ministry of State Security's (MSS) Tianjin State Security Bureau and worked for the Huaying Haitai Science and Technology Development Company.

MITRE ATT&CK Techniques

Associated Malware

AdFindChChesCobalt StrikeEcipekacEvilGrabFYAntiHUI LoaderImpacketMimikatzNetP8RATPingPlugXPoisonIvyPowerSploitPsExecQuasarRATRedLeavesSNUGRIDESodaMasterUPPERCUTcertutilcmdesentutlpwdump

Full MITRE ATT&CK profile

1 recent article mentions this actor

HighMalwareVulnerability
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
The Hacker News · 2d ago