← All Threat Actors
Threat Actor Profile

Tick

BRONZE BUTLER G0060 Nian PLA Unit 61419 REDBALDKNIGHT STALKER PANDA Stalker Taurus Swirl Typhoon TELLURIUM
▲ High Threat
Edge Infrastructure Exploitation Campaign, Southeast Asian Telecommunications Espionage
Origin China
Sponsor China
Motivation Strategic Espionage and Intelligence Gathering

Target Sectors

Government Defense Telecommunications Critical Infrastructure Diplomatic Entities Information Technology Southeast Asian Regional Organizations

Known TTPs

Exploitation of Edge Network Devices (e.g., VPNs, Firewalls, Routers)
Living-off-the-Land (LotL)
Web Shell Deployment
Credential Access via Memory Injection
Spearphishing
Command and Control (C2) via Legitimate Cloud Services
Lateral Movement using Valid Accounts

External Resources

CISA Advisories ↗

LINK COPIED TO CLIPBOARD