APT.3102
origin (suspected)
Chinaattribution confidence: medium (50)
source: misp-galaxy1 refs →
APT.3102· China
APT.3102 is a China-attributed threat actor with undefined tactics and targeting.
Analyst brief
APT.3102 is a threat actor of unknown type, attributed to China based on limited data. The targeting scope and specific TTPs leveraged by this actor remain undefined in the provided information, making its victimology and tactical preferences unclear. Defenders should focus on detecting anomalous C2 traffic, potential zero-day exploitation patterns, and any indications of ransomware or phishing campaigns that could be associated with this group.
unknown
FAQ2
Which country is APT.3102 attributed to?
APT.3102 has been identified as originating from China based on limited attribution.
What types of activity should defenders focus on regarding APT.3102?
Defenders should focus on anomalous C2 traffic, signs of zero-day exploitation, and potential ransomware or phishing campaigns.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.