APT ATLAS

⌘K

Atlas Actors145 Names507 Sectors40

BlackTech (aka BlackTech, RADIO PANDA) · APT Atlas

Actors/Nation-state / APT/Asia

BlackTech

G0098APTCN · China

AKA RADIO PANDA · Palmerworm · HUAPI · Manga Taurus · T-APT-03 · Temp.Overboard

MITRE: G0098Mandiant: APT41Microsoft: Circuit TyphoonCrowdStrike: CIRCUIT PANDA

Targets5

Sectors8

Threat types1

GIRs mapped0/480

Active since2010

Explore in atlas

Export

STIX 2.1 ATT&CK Navigator

QUICK FACTS

TypeNation-state / APT

OriginChina

First seen2010

Type (verbatim)nation-state APT

GIR mappings0/480

TTPs9

Targets5

Sectors8

Record updated2026-08-03

Also tracked as

4 vendor names · 6 other aliases

Open Rosetta Stone

CrowdStrike

CIRCUIT PANDA

Mandiant

APT41

Microsoft

Circuit Typhoon

MITRE

G0098

UNATTRIBUTED ALIASESRADIO PANDAPalmerwormHUAPIManga TaurusT-APT-03Temp.Overboard

Victimology

Geographic footprint · 5 countries

Export STIX

origin · Chinatargeted countries · 5

ASIA · 4

Hong Kong · Japan · Singapore · Taiwan

AMERICAS · 1

United States

Sectors targeted

8 of 40

Government100 actors Defense72 actors Financial Services73 actors Technology60 actors Telecom71 actors NGOs & Dissidents56 actors Education & Research62 actors Maritime24 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 9 techniques

Initial Access · 3

T1190Exploit Public-Facing Application T1566.001Spearphishing Attachment T1566.002Spearphishing Link

Execution · 3

T1106Native API

Discovery · 1

T1046Network Service Discovery

Lateral Movement · 1

T1021.004SSH

Stealth · 1

T1036.002Right-to-Left Override

GIR mappings

0 / 480 requirements mapped

Open matrix

No GIRs mapped yet for this actor.

References

No supporting references have been recorded for this profile. Treat uncited claims as unverified.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer9 techniques · layer format 4.5

Related actors

By origin and actor type

Agriusnation-state

Iran · 2 targets · since 2020

AppleJeusnation-state

North Korea · 25 targets · since 2018

APT1nation-state

China · 17 targets · since 2006

APT10nation-state

China · 19 targets · since 2009

APT12nation-state

China · 11 targets · since 2009

APT14nation-state

China · 15 targets · since —

T1203

Exploitation for Client Execution

T1204.001Malicious Link