Tactic Coverage
Tactics observed across China groups
Stealth
40
Initial Access
39
Execution
38
Resource Development
32
Persistence
32
Discovery
31
Command & Control
31
Privilege Escalation
31
Lateral Movement
26
Credential Access
25
Most Used Toolsets
Frequency of use across China groups
Net
14
Mimikatz
12
Cobalt Strike
11
PoisonIvy
9
Tasklist
9
PlugX
9
ipconfig
7
PsExec
7
🇨🇳 China Groups
G0096
APT41
Wicked Panda, Brass Typhoon, BARIUM
82 techniques 32 software
G1017
Volt Typhoon
BRONZE SILHOUETTE, Vanguard Panda, DEV-0391
81 techniques 17 software
G0114
Chimera
59 techniques 6 software
G0027
Threat Group-3390
Earth Smilodon, TG-3390, Emissary Panda
57 techniques 24 software
G0065
Leviathan
MUDCARP, Kryptonite Panda, Gadolinium
50 techniques 17 software
G1048
UNC3886
49 techniques 8 software
G0004
Ke3chang
APT15, Mirage, Vixen Panda
46 techniques 11 software
G0045
menuPass
Cicada, POTASSIUM, Stone Panda
46 techniques 25 software
G0022
APT3
Gothic Panda, Pirpi, UPS Team
44 techniques 6 software
G1006
Earth Lusca
TAG-22, Charcoal Typhoon, CHROMIUM
44 techniques 9 software
G0125
HAFNIUM
Operation Exchange Marauder, Silk Typhoon
44 techniques 6 software
G1054
MirrorFace
Earth Kasha
43 techniques 16 software
G0040
Patchwork
Hangover Group, Dropping Elephant, Chinastrats
41 techniques 8 software
G0060
BRONZE BUTLER
REDBALDKNIGHT, Tick
40 techniques 14 software
G0106
Rocke
36 techniques 0 software
G0143
Aquatic Panda
35 techniques 6 software
G0121
Sidewinder
T-APT-04, Rattlesnake
30 techniques 1 software
G1023
APT5
Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD
29 techniques 13 software
G0128
ZIRCONIUM
APT31, Violet Typhoon
29 techniques 0 software
G1014
LuminousMoth
28 techniques 2 software
G0006
APT1
Comment Crew, Comment Group, Comment Panda
23 techniques 17 software
G0073
APT19
Codoso, C0d0so0, Codoso Team
21 techniques 2 software
G1021
Cinnamon Tempest
DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT
19 techniques 8 software
G1034
Daggerfly
Evasive Panda, BRONZE HIGHLAND
17 techniques 6 software
G0001
Axiom
Group 72
16 techniques 8 software
G1002
BITTER
T-APT-17
16 techniques 1 software
G0131
Tonto Team
Earth Akhlut, BRONZE HUNTLEY, CactusPete
15 techniques 6 software
G0098
BlackTech
Palmerworm
14 techniques 6 software
G0019
Naikon
14 techniques 15 software
G1045
Salt Typhoon
14 techniques 1 software
G0018
admin@338
12 techniques 7 software
G0009
Deep Panda
Shell Crew, WebMasters, KungFu Kittens
10 techniques 7 software
G1007
Aoqin Dragon
9 techniques 2 software
G0066
Elderwood
Elderwood Gang, Beijing Group, Sneaky Panda
9 techniques 9 software
G0136
IndigoZebra
7 techniques 3 software
G0103
Mofang
6 techniques 2 software
G0044
Winnti Group
Blackfly
6 techniques 3 software
G0005
APT12
IXESHE, DynCalc, Numbered Panda
5 techniques 3 software
G1042
RedEcho
5 techniques 1 software
G0039
Suckfly
5 techniques 1 software
G0024
Putter Panda
APT2, MSUpdater
4 techniques 4 software
G0025
APT17
Deputy Dog
2 techniques 1 software
G0013
APT30
2 techniques 5 software
G0011
PittyTiger
2 techniques 5 software
G0023
APT16
1 techniques 1 software
G0002
Moafee
1 techniques 1 software
G0029
Scarlet Mimic
1 techniques 4 software
↑