File · APT22 · Unknown · assessed origin China · misp-galaxy + mitre-attack · refreshed 2026-10-06

APT22

attack rose · 5 techniques across 5 tactics

Analyst brief

misp-galaxy + mitre-attack

Suckfly is a China-based threat group that has been active since at least 2014

MITRE ATT&CK Enterprise · tap a technique

5 techniques · 5 of 15 tactics

Matters for

select a technique

1 malware

Malware
Malware · 1	ATT&CK	Shared by
Nidiran	S0118 ↗

as stated by MITRE ATT&CK · “shared by” counts roster dossiers citing the same S-id

via APTnotes · linked, never re-hosted

keyless · no signup

10 sources

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.