Sponsor / State AffiliationIndependent / Not Attributed
Primary MotivationEspionage / Financial
Active TimelineUnknown – Present
Confidence Rating70% (Grounded)
RedEcho: The group made heavy use of AXIOMATICASYMPTOTE — a term we use to track infrastructure that comprises ShadowPad C2s, which is shared between several Chinese threat activity groups