Elderwood (G0066) | Threat Actor Index

About Elderwood

Elderwood is a suspected Chinese cyber espionage group that was reportedly responsible for the 2009 Google intrusion known as Operation Aurora. The group has targeted defense organizations, supply chain manufacturers, human rights and nongovernmental organizations (NGOs), and IT service providers.

View MITRE record ↗

Techniques by Tactic (9)

Initial Access

T1189 Drive-by CompromiseT1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link

Execution

T1203 Exploitation for Client ExecutionT1204.001 Malicious LinkT1204.002 Malicious File

Stealth

T1027.002 Software PackingT1027.013 Encrypted/Encoded File

Command & Control

T1105 Ingress Tool Transfer

Toolsets (9)

🐛

Briba S0204

Malware · Windows

🐛

Hydraq S0203

Malware · Windows

🐛

Linfo S0211

Malware · Windows

🐛

Naid S0205

Malware · Windows

🐛

Nerex S0210

Malware · Windows

🐛

Pasam S0208

Malware · Windows

🐛

PoisonIvy S0012

Malware · Windows

🐛

Vasport S0207

Malware · Windows

🐛

Wiarp S0206

Malware · Windows

References & Reports (3)