[Elderwood](https://attack.mitre.org/groups/G0066) is a suspected Chinese cyber espionage group that was reportedly responsible for the 2009 Google intrusion known as Operation Aurora. (Citation: Security Affairs Elderwood Sept 2012) The group has targeted defense organizations, supply chain manufacturers, human rights and nongovernmental organizations (NGOs), and IT service providers. (Citation: Symantec Elderwood Sept 2012) (Citation: CSM Elderwood Sept 2012)
The same group is tracked under different names by different vendors.
| Vendor | Name |
|---|---|
| OSINT | SNEAKY PANDA |
| OSINT | Elderwood |
| OSINT | Elderwood Gang |
| OSINT | SIG22 |
| OSINT | G0066 |
Sectors: Private sector, Civil society
Victim countries: United States, Canada, United Kingdom, Switzerland, Hong Kong, Australia, India, Taiwan, China, Denmark
No IOCs extracted yet from reports naming this actor.
Every report in the Global Intel Library that names Beijing Group, newest first. Open any report to see the full analysis with provenance.
No reports in the Lore library name this actor yet.
Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to Beijing Group. Each row shows why it was linked and where it came from.
No feed indicators linked to this actor yet. Feeds are checked every hour.
Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.