File · Chimera · Unknown · mitre-attack · refreshed 2026-10-06

Chimera

attack rose · 59 techniques across 12 tactics

Analyst brief

mitre-attack

Chimera is a suspected China-based threat group that has been active since at least 2018 targeting the semiconductor industry in Taiwan as well as data from the airline industry.

Kill chain

MITRE ATT&CK Enterprise · tap a technique

59 techniques · 12 of 15 tactics

Matters for

Reconnaissance
1 technique
Resource development
1 technique
Execution
6 techniques
Persistence
1 technique
Stealth
7 techniques
Defense impairment
2 techniques
Credential access
4 techniques
Discovery
18 techniques
Lateral movement
5 techniques
Collection
8 techniques
Command and control
4 techniques
Exfiltration
2 techniques

select a technique

Arsenal

1 malware · 5 tools

Malware
Malware · 1	ATT&CK	Shared by
Cobalt Strike	S0154 ↗	24 actors

Tools
Tools · 5	ATT&CK	Shared by
PsExec	S0029 ↗	38 actors
BloodHound	S0521 ↗	6 actors
esentutl	S0404 ↗	3 actors
Net	S0039 ↗	29 actors
Mimikatz	S0002 ↗	49 actors

as stated by MITRE ATT&CK · “shared by” counts roster dossiers citing the same S-id

Take it with you

keyless · no signup

References

3 sources

Track Chimera on the wire.

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Follow on Telegram KEV RSS API

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.

Analyst brief

Kill chain

Reconnaissance

Resource development

Execution

Persistence

Stealth

Defense impairment

Credential access

Discovery

Lateral movement

Collection

Command and control

Exfiltration

Arsenal

Take it with you

References

Track Chimera on the wire.