FlagThis
← Threat Actors
/
China
/
UAT-8302
DOSSIER // UAT-8302
UAT-8302
ACTIVE CAMPAIGN TRACKED
⚠ Critical Threat
China
Primary Aliases:
CL-STA-0049
Earth Alux
Erudite Mogwai
Ink Dragon
🔍 Adversary Rosetta Stone (11) ▾
📋 Copy All
Sponsor / State Affiliation
Chinese Government
Primary Motivation
Strategic espionage, intelligence gathering, and theft of intellectual property related to national security and economic interests.
Active Timeline
Unknown – Present
Confidence Rating
85% (Grounded)
Edge Infrastructure Infiltration, Strategic IP Exfiltration
📥 Export ATT&CK Layer (.json)
🔔 RSS Feed
🏛️ CISA Advisories ↗
📋 Copy Dossier Briefing
⚔️ Weaponized CVE Matrix
(0)
No specific weaponized CVEs currently mapped in the public baseline.
🎯 Target Sectors & Focus
Government
Defense Industrial Base (DIB)
Telecommunications
Aerospace
Critical Infrastructure
High-Technology Manufacturing
🛡️ MITRE ATT&CK® Attack Lifecycle
(6 TTPs)
📥 Download Navigator JSON
All Stages
6
Initial Access
1
Execution
1
Persistence & Privilege Escalation
2
Credential Access & Discovery
1
Operational Techniques
1
Initial Access
1
T1566
Exploitation of public-facing edge devices (VPNs, Firewalls)
↗
Execution
1
T1059
Living-off-the-land (LotL) via PowerShell and WMI
↗
Persistence & Privilege Escalation
2
T1547
DLL Side-loading and Hijacking
↗
T1547
Deployment of custom web shells
↗
Credential Access & Discovery
1
T1003
Credential harvesting and LSASS memory dumping
↗
Operational Techniques
1
T1000
Use of legitimate remote management and monitoring (RMM) tools
↗
📰 Verified Campaigns & Intelligence Archive
🔔 Subscribe to Alerts
[DEEP DIVE]
Jewelbug UAT-8302 APT: Dual-Mandate Espionage and Cryptocurrency Theft
Attacks and Vulnerabilities
2026-08-13
[DEEP DIVE]
Earth Alux UAT-8302 Espionage Campaign: VARGEIT and COBEACON Malware Deployment
Attacks and Vulnerabilities
2026-06-23
Adversary Rosetta Stone // UAT-8302
×
🛡️ Other Industry Tracking Codes
CL-STA-0049
📋
Earth Alux
📋
Erudite Mogwai
📋
Ink Dragon
📋
Jewelbug
📋
LongNosedGoblin
📋
REF7707
📋
Shadow-Earth-053
📋
SHADOW-EARTH-054
📋
Space Pirates
📋
Webworm
📋
Copied to clipboard
SHARE INTELLIGENCE WIRE
×
Story Title
X / Twitter
Bluesky
LinkedIn
Copy Link
LINK COPIED TO CLIPBOARD