• Believed to be closely linked to, though distinct from, Winnti.
This threat actor compromises a range of actors of espionage purposes, namely government agencies in Asia and the West, circuit manufacturers, networking equipment manufacturers, internet companies, software vendors, journalists, nongovernmental organizations, law firms, telecommunication firms, venture capitalists, and academic institutions.
Suspected victims
  • United States
  • Netherlands
  • Italy
  • Japan
  • United Kingdom
  • Belgium
  • Russia
  • Indonesia
  • Germany
  • Switzerland
  • China
Suspected state sponsor
  • China
Type of incident
  • Espionage
Target category
  • Government
  • Private sector