Atlas Actors147 Names471 Sectors40 Requirements480

⌘K

Atlas Actors147 Names471 Sectors40 Requirements480

Actors/Nation-state / APT/Asia

APT36

G0134APTPK · Pakistan

AKA C-Major · ProjectM · Transparent Tribe · Earth Karkaddan · TMP.Lapis

CrowdStrike: MYTHIC LEOPARDMicrosoft: Chinstrap SpiderMITRE: G0134Proofpoint: TA456Secureworks: COPPER FIELDSTONE

Targets16

Sectors8

Threat types1

GIRs covered0/480

Active since2013

QUICK FACTS

TypeNation-state / APT

OriginPakistan

First seen2013

Type (verbatim)nation-state APT

GIR coverage0/480

TTPs9

Targets16

Sectors8

Last reviewed2026-07-29

Also tracked as

6 vendor names · 5 other aliases

Open Rosetta Stone

CrowdStrike

MYTHIC LEOPARD

Mandiant

APT36

Microsoft

Chinstrap Spider

MITRE

G0134

Proofpoint

TA456

Secureworks

COPPER FIELDSTONE

UNATTRIBUTED ALIASESC-MajorProjectMTransparent TribeEarth KarkaddanTMP.Lapis

Victimology

Geographic footprint · 16 countries

origin · Pakistantargeted countries · 16

ASIA · 8

Afghanistan · Bangladesh · Bahrain · India · Kazakhstan · Malaysia · Pakistan · Qatar

EUROPE · 7

Austria · Belgium · Switzerland · Czechia · United Kingdom · Norway · Sweden

AMERICAS · 1

United States

Sectors targeted

8 of 40

Government100 actors Defense72 actors Aviation22 actors Healthcare47 actors NGOs & Dissidents56 actors Energy / Utilities59 actors Oil and Gas21 actors Hospitality33 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 9 techniques

Initial Access · 3

T1189Drive-by Compromise T1566.001Spearphishing Attachment T1566.002Spearphishing Link

Execution · 3

T1059.005Visual Basic

Command And Control · 1

T1568Dynamic Resolution

Stealth · 2

T1036.005Match Legitimate Resource Name or Location T1564.001Hidden Files and Directories

GIR coverage

0 / 480 requirements satisfied

Open matrix

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer9 techniques · layer format 4.5

Related actors

By origin and actor type

APT31nation-state

China · 6 targets · since 2013

APT8nation-state

China · 5 targets · since —

APT24nation-state

China · 3 targets · since 2008

APT27nation-state

China · 23 targets · since 2010

APT44nation-state

Russia · 25 targets · since 2009

APT21nation-state

China · 5 targets · since 2010

T1203

Exploitation for Client Execution

T1204.001Malicious Link