APT15

ACTIVE CAMPAIGN TRACKED ▲ High Threat China

Primary Aliases: Nylon Typhoon VIXEN PANDA Backdoor Diplomacy BRONZE DAVENPORT

Sponsor / State Affiliation China (Ministry of State Security)

Primary Motivation Strategic espionage targeting political, military, and economic intelligence.

Active Timeline Unknown – Present

Confidence Rating 90% (Grounded)

Edge Gateway Vulnerability Exploitation, Professional Network Social Engineering

⚔️ Weaponized CVE Matrix (0)

No specific weaponized CVEs currently mapped in the public baseline.

🎯 Target Sectors & Focus

Government Defense Aerospace Telecommunications Diplomatic Missions Non-Governmental Organizations (NGOs) Academic Research Institutions

🛡️ MITRE ATT&CK® Attack Lifecycle (7 TTPs)

📥 Download Navigator JSON

Initial Access 2

T1566 Spear-phishing via professional social networks

T1566 Exploitation of public-facing edge devices (VPNs, Firewalls)

Execution 1

T1059 Living-off-the-Land (LotL) techniques

Credential Access & Discovery 2

T1003 Social engineering

T1003 Credential harvesting

Command & Control 1

T1071 Custom malware deployment

Operational Techniques 1

T1000 Side-loading

📰 Verified Campaigns & Intelligence Archive

🔔 Subscribe to Alerts

[DEEP DIVE] Mirage Kitten Deploys NightLedger Backdoor and WebSocket Tunneling Tools

Attacks and Vulnerabilities 2026-07-29

Copied to clipboard

LINK COPIED TO CLIPBOARD