A Chinese state-sponsored cyber espionage group targeting government and military sectors via NetTraveler malware.
APT21, also tracked as HAMMER PANDA, TEMP.Zhenbao, is a nation-state cyber espionage actor originating from China. It primarily targets government and military sectors in countries such as Mongolia, Kazakhstan, Germany, and the United States. The actor employs spear-phishing campaigns to deliver the NetTraveler malware for data exfiltration. Defenders should focus on detecting targeted phishing emails aimed at government personnel and monitoring for anomalous C2 patterns indicative of NetTraveler activity.
APT21 Çin mənşəli APT qrupudur, Mongolia, Kazakhstan, Tajikistan, Germany, United Kingdom, India-da government və military qurumlarını hədəfləyib.
APT21 primarily targets government and military sectors in countries such as Mongolia, Kazakhstan, Germany, and the United States.
Defenders should focus on detecting targeted phishing emails aimed at government personnel and monitoring for anomalous C2 patterns indicative of NetTraveler activity.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.