MITRE ATT&CKgroup
G0066 Elderwood
- Domain
- enterprise
- Aliases
- Elderwood Gang, Beijing Group, Sneaky Panda
- Version
- 1.3
- Created
- 2018-04-18
Description
Elderwood is a suspected Chinese cyber espionage group that was reportedly responsible for the 2009 Google intrusion known as Operation Aurora. The group has targeted defense organizations, supply chain manufacturers, human rights and nongovernmental organizations (NGOs), and IT service providers.
Related
Uses · MITRE ATT&CK (18)
- T1027.013 Encrypted/Encoded File sub-technique
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1027.002 Software Packing sub-technique
- S0203 Hydraq software (malware)
- S0204 Briba software (malware)
- S0205 Naid software (malware)
- S0206 Wiarp software (malware)
- S0207 Vasport software (malware)
- S0208 Pasam software (malware)
- S0210 Nerex software (malware)
- S0211 Linfo software (malware)
- T1189 Drive-by Compromise technique
- T1203 Exploitation for Client Execution technique
- S0012 PoisonIvy software (malware)
- T1105 Ingress Tool Transfer technique
References
- https://www.csmonitor.com/USA/2012/0914/Stealing-US-business-secrets-Experts-ID-two-huge-cyber-gangs-in-China CSM Elderwood Sept 2012
- https://web.archive.org/web/20190717233006/http:/www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf Symantec Elderwood Sept 2012
- http://securityaffairs.co/wordpress/8528/hacking/elderwood-project-who-is-behind-op-aurora-and-ongoing-attacks.html Security Affairs Elderwood Sept 2012