Threat feed IOCs (154)

Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to APT10. Each row shows why it was linked and where it came from.

Public research & publications (30)

Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.

• researchcenter.paloaltonetworks.comhttp://researchcenter.paloaltonetworks.com/2017/02/unit42-menupass-returns-new-malware-new-attacks-japanese-academics-organizations/
• web.archive.orghttp://web.archive.org/web/20220810112638/https:/www.accenture.com/t20180423T055005Z_w_/se-en/_acnmedia/PDF-76/Accenture-Hogfish-Threat-Analysis.pdf
• attack.mitre.orghttps://attack.mitre.org/groups/G0045
• symantec-enterprise-blogs.security.comhttps://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/cicada-apt10-japan-espionage
• web.archive.orghttps://web.archive.org/web/20220224041316/https:/www.pwc.co.uk/cyber-security/pdf/cloud-hopper-report-final-v4.pdf
• fireeye.comhttps://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html
• fireeye.comhttps://www.fireeye.com/blog/threat-research/2018/09/apt10-targeting-japanese-corporations-using-updated-ttps.html
• justice.govhttps://www.justice.gov/opa/page/file/1122671/download
• justice.govhttps://www.justice.gov/opa/pr/two-chinese-hackers-associated-ministry-state-security-charged-global-computer-intrusion
• mandiant.comhttps://www.mandiant.com/sites/default/files/2021-09/rpt-poison-ivy.pdf
• secureworks.comhttps://www.secureworks.com/research/bronze-starlight-ransomware-operations-use-hui-loader
• slideshare.nethttps://www.slideshare.net/slideshow/crowd-casts-monthly-you-have-an-adversary-problem/27262315
• unit42.paloaltonetworks.comhttps://unit42.paloaltonetworks.com/unit42-menupass-returns-new-malware-new-attacks-japanese-academics-organizations/
• cfr.orghttps://www.cfr.org/interactive/cyber-operations/apt-10
• ncsc.gov.ukhttps://www.ncsc.gov.uk/content/files/protected_files/article_files/Joint%20report%20on%20publicly%20available%20hacking%20tools%20%28NCSC%29.pdf
• pwc.co.ukhttps://www.pwc.co.uk/cyber-security/pdf/cloud-hopper-report-final-v4.pdf
• eweek.comhttps://www.eweek.com/security/chinese-nation-state-hackers-target-u.s-in-operation-tradesecret
• blog.trendmicro.comhttps://blog.trendmicro.com/trendlabs-security-intelligence/chessmaster-cyber-espionage-campaign/
• accenture.comhttps://www.accenture.com/t20180423T055005Z_w_/se-en/_acnmedia/PDF-76/Accenture-Hogfish-Threat-Analysis.pdf
• us-cert.govhttps://www.us-cert.gov/sites/default/files/publications/IR-ALERT-MED-17-093-01C-Intrusions_Affecting_Multiple_Victims_Across_Multiple_Sectors.pdf
• fbi.govhttps://www.fbi.gov/news/stories/chinese-hackers-indicted-122018
• attack.mitre.orghttps://attack.mitre.org/groups/G0045/
• secureworks.comhttps://www.secureworks.com/research/threat-profiles/bronze-riverside
• unit42.paloaltonetworks.comhttps://unit42.paloaltonetworks.com/atoms/granite-taurus
• mandiant.comhttps://www.mandiant.com/resources/insights/apt-groups
• pwc.co.ukhttps://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf
• fireeye.comhttps://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf
• proofpoint.comhttps://www.proofpoint.com/us/blog/threat-insight/ta410-group-behind-lookback-attacks-against-us-utilities-sector-returns-new
• crowdstrike.comhttps://www.crowdstrike.com/blog/two-birds-one-stone-panda/
• symantec-enterprise-blogs.security.comhttp://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/cicada-apt10-china-ngo-government-attacks