Symantec described UPS in 2016 report as: 'Buckeye (also known as APT3, Gothic Panda, UPS Team, and TG-0110) is a cyberespionage group that is believed to have been operating for well over half a decade. Traditionally, the group attacked organizations in the US as well as other targets. However, Buckeyes focus appears to have changed as of June 2015, when the group began compromising political entities in Hong Kong.'
The same group is tracked under different names by different vendors.
| Vendor | Name |
|---|---|
| OSINT | GOTHIC PANDA |
| OSINT | TG-0110 |
| OSINT | Group 6 |
| OSINT | UPS |
| OSINT | Buckeye |
| OSINT | Boyusec |
| OSINT | BORON |
| OSINT | BRONZE MAYFAIR |
| OSINT | Red Sylvan |
| OSINT | Brocade Typhoon |
| OSINT | Pirpi |
| OSINT | UPS Team |
| OSINT | Threat Group-0110 |
Sectors: Private sector, Political party
Victim countries: United States, United Kingdom, Hong Kong
No IOCs extracted yet from reports naming this actor.
Every report in the Global Intel Library that names APT3, newest first. Open any report to see the full analysis with provenance.
No reports in the Lore library name this actor yet.
Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to APT3. Each row shows why it was linked and where it came from.
No feed indicators linked to this actor yet. Feeds are checked every hour.
Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.