Actors/Nation-state / APT/Asia

ToddyCat

G1022APTCN · China

AKA Websiic

MITRE: G1022

Targets0

Sectors2

Threat types1

GIRs mapped0/480

Active since2020

Explore in atlas

Also tracked as

1 vendor names · 1 other aliases

Open Rosetta Stone

MITRE

G1022

UNATTRIBUTED ALIASESWebsiic

Victimology

Geographic footprint · 0 countries

Export STIX

origin · Chinatargeted countries · 0

No targets recorded for this actor.

Sectors targeted

2 of 40

Government100 actors Defense72 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 21 techniques

Initial Access · 2

T1190Exploit Public-Facing Application T1566.003Spearphishing via Service

Execution · 5

T1047Windows Management Instrumentation

Discovery · 5

T1018Remote System Discovery

Lateral Movement · 1

T1021.002SMB/Windows Admin Shares

Collection · 2

T1005Data from Local System T1560.001Archive via Utility

Exfiltration · 1

T1567.002Exfiltration to Cloud Storage

Command And Control · 1

T1095Non-Application Layer Protocol

Defense Impairment · 1

T1686Disable or Modify System Firewall

Stealth · 3

T1036.005Match Legitimate Resource Name or Location T1078.002Domain Accounts

GIR mappings

0 / 480 requirements mapped

Open matrix

No GIRs mapped yet for this actor.

References

No supporting references have been recorded for this profile. Treat uncited claims as unverified.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer21 techniques · layer format 4.5

Related actors

By origin and actor type

T1053.005

Scheduled Task

T1059.001PowerShell

T1059.003Windows Command Shell

T1106Native API

T1049

System Network Connections Discovery

T1057Process Discovery

T1083File and Directory Discovery

T1680Local Storage Discovery

T1564.003

Hidden Window