APT
ATLAS
Atlas
Actors
145
Names
507
Sectors
40
⌘K
▸
sign in
Atlas
Actors
145
Names
507
Sectors
40
LOADING
Tick (aka Tick, Nian) · APT Atlas
Actors
/
Nation-state / APT
/
Asia
Tick
APT
CN · China
AKA
Nian · REDBALDKNIGHT
Microsoft
:
Perplexed Bunny
CrowdStrike
:
STALKER PANDA
Secureworks
:
BRONZE BUTLER
Targets
4
Sectors
6
Threat types
1
GIRs mapped
0/480
Active since
2008
Explore in atlas
Save actor
Share
Export
STIX 2.1
ATT&CK Navigator
Also tracked as
3 vendor names · 2 other aliases
Open Rosetta Stone
CrowdStrike
STALKER PANDA
Microsoft
Perplexed Bunny
Secureworks
BRONZE BUTLER
UNATTRIBUTED ALIASES
Nian
REDBALDKNIGHT
Victimology
Geographic footprint · 4 countries
Export STIX
origin · China
targeted countries · 4
ASIA ·
3
Hong Kong
·
Japan
·
Taiwan
AMERICAS ·
1
United States
Sectors targeted
6 of 40
Government
100 actors
Aerospace
58 actors
Aviation
22 actors
Media & Journalism
48 actors
Industrials / Engineering
28 actors
Private Sector (generic)
29 actors
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
ESP · Espionage
MITRE ATT&CK · 32 techniques
Initial Access
· 2
T1189
Drive-by Compromise
T1566.001
Spearphishing Attachment
Execution
· 7
T1053.002
At
Persistence
· 1
Credential Access
· 1
T1003.001
LSASS Memory
Discovery
· 5
T1007
System Service Discovery
T1018
Remote System Discovery
Lateral Movement
· 2
T1080
Taint Shared Content
Collection
· 4
T1005
Data from Local System
T1039
Data from Network Shared Drive
T1113
Screen Capture
Command And Control
· 3
T1071.001
Web Protocols
T1102.001
Dead Drop Resolver
Defense Impairment
· 1
T1685
Disable or Modify Tools
Stealth
· 6
T1027.003
Steganography
T1036
Masquerading
GIR mappings
0 / 480 requirements mapped
Open matrix
No GIRs mapped yet for this actor.
References
No supporting references have been recorded for this profile. Treat uncited claims as unverified.
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
32 techniques · layer format 4.5
Related actors
By origin and actor type
Agrius
nation-state
Iran · 2 targets · since 2020
AppleJeus
nation-state
North Korea · 25 targets · since 2018
APT1
nation-state
China · 17 targets · since 2006
APT10
nation-state
China · 19 targets · since 2009
APT12
nation-state
China · 11 targets · since 2009
APT14
nation-state
China · 15 targets · since —
T1053.005
Scheduled Task
T1059.001
PowerShell
T1059.003
Windows Command Shell
T1059.005
Visual Basic
T1059.006
Python
T1203
Exploitation for Client Execution
T1547.001
Registry Run Keys / Startup Folder
T1083
File and Directory Discovery
T1124
System Time Discovery
T1518
Software Discovery
T1550.003
Pass the Ticket
T1560.001
Archive via Utility
T1105
Ingress Tool Transfer
T1036.002
Right-to-Left Override
T1036.005
Match Legitimate Resource Name or Location
T1070.004
File Deletion
T1140
Deobfuscate/Decode Files or Information