Threat Investigation
Request a demo
State-sponsored

APT27

APT27 is classified as state-sponsored.

Malware families
11
Suspected state sponsor
China
Also known as
17

A China-based actor that targets foreign embassies to collect data on government, defence, and technology sectors.

The group is suspected of operating with the support of China.

The group is associated with 11 malware families.

Also known as: GreedyTaotie, TG-3390, EMISSARY PANDA, TEMP.Hippo, Red Phoenix, Budworm, Group 35, ZipToken, Iron Tiger, BRONZE UNION, Lucky Mouse, G0027, Iron Taurus, Earth Smilodon, Circle Typhoon, Linen Typhoon, SHORE CASTLE

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

APT27 · Threat actors · Dark Radar