Threat Actor Profile

menuPass

APT10 BRONZE RIVERSIDE Cicada CVNX G0045 HOGFISH POTASSIUM Red Apollo Stone Panda

⚠ Critical Threat

Operation AkaiRyū (Red Dragon), Cuckoo Spear, Earth Kasha Expansion

Origin China

Sponsor Chinese Ministry of State Security (MSS) / Tianjin State Security Bureau

Motivation Strategic cyber espionage and intellectual property theft to support national economic and security interests (e.g., Made in China 2025).

Target Sectors

Government Diplomatic Organizations Managed Service Providers (MSPs) Healthcare Defense Aerospace Finance Maritime Biotechnology Energy Research Institutions Think Tanks

Known TTPs

Spear-phishing with malicious ZIP/LNK attachments

DLL Sideloading (specifically targeting on-screen keyboard processes)

Trident Side-loading

Cloud Service C2 (OneDrive, Dropbox, Yandex)

Supply Chain Compromise

Custom Backdoors (ANEL, LODEINFO, NOOPDOOR)

Credential Stealing (MirrorStealer)

Wiper Malware (PathWiper)

Privilege Escalation

External Resources

CISA Advisories ↗

Related Intelligence

DEEP DIVE IBM and AT&T Accused of Suppressing Foreign Cyber Espionage Data in Federal Lawsuit

Miscellaneous 2026-06-07

menuPass

Target Sectors

Known TTPs

External Resources

Related Intelligence

SHARE INTELLIGENCE WIRE