Trusted Design

APT1

G0006 · MITRE Pageへのリンク

脅威アクターの詳細

[APT1](https://attack.mitre.org/groups/G0006) is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398. (Citation: Mandiant APT1)

別名・別称

APT1
Comment Crew
Comment Group
Comment Panda

利用した攻撃手法

• T1560.001 - Archive via Utility
• T1036.005 - Match Legitimate Resource Name or Location
• T1114.001 - Local Email Collection
• T1087.001 - Local Account
• T1566.002 - Spearphishing Link
• T1566.001 - Spearphishing Attachment
• T1119 - Automated Collection
• T1007 - System Service Discovery
• T1135 - Network Share Discovery
• T1005 - Data from Local System
• T1583.001 - Domains
• T1585.002 - Email Accounts
• T1003.001 - LSASS Memory
• T1016 - System Network Configuration Discovery
• T1588.001 - Malware
• T1049 - System Network Connections Discovery
• T1057 - Process Discovery
• T1588.002 - Tool
• T1114.002 - Remote Email Collection
• T1059.003 - Windows Command Shell
• T1550.002 - Pass the Hash
• T1021.001 - Remote Desktop Protocol
• T1584.001 - Domains

関連するCVE (攻撃手法に関連)

• CVE-2015-4495 (T1560.001)
• CVE-2015-5749 (T1588.001)
• CVE-2016-1898 (T1585.002)
• CVE-2016-1897 (T1585.002)
• CVE-2015-7261 (T1560.001)
• CVE-2015-6036 (T1560.001)
• CVE-2015-7262 (T1560.001)
• CVE-2015-0932 (T1560.001)
• CVE-2010-3081 (T1007)
• CVE-2017-16929 (T1566.001)
• CVE-2025-31125 (T1585.002)
• CVE-2025-68645 (T1560.001)
• CVE-2014-4114 (T1566.001)
• CVE-2015-1770 (T1021.001)
• CVE-2012-1856 (T1114.001)
• CVE-2015-2545 (T1566.001)
• CVE-2015-2546 (T1114.001)
• CVE-2014-6332 (T1114.001)
• CVE-2017-0199 (T1021.001)
• CVE-2017-12149 (T1114.001)
• CVE-2015-2424 (T1114.001)
• CVE-2015-0097 (T1114.001)
• CVE-2012-0158 (T1049)
• CVE-2014-1761 (T1566.001)
• CVE-2015-2502 (T1114.001)
• CVE-2014-6271 (T1059.003)
• CVE-2014-4113 (T1114.001)
• CVE-2012-1889 (T1114.001)
• CVE-2015-1641 (T1114.001)
• CVE-2015-1701 (T1114.001)
• CVE-2012-4969 (T1059.003)
• CVE-2017-0263 (T1114.001)
• CVE-2017-0261 (T1049)
• CVE-2017-0262 (T1049)
• CVE-2016-6532 (T1003.001)
• CVE-2017-3212 (T1114.001)
• CVE-2025-55182 (T1049)
• CVE-2013-3906 (T1114.001)
• CVE-2014-6352 (T1588.002)
• CVE-2015-0016 (T1566.001)
• CVE-2010-3333 (T1114.001)
• CVE-2012-4792 (T1550.002)
• CVE-2014-0322 (T1114.001)
• CVE-2013-0074 (T1114.001)
• CVE-2013-2551 (T1016)
• CVE-2014-1776 (T1585.002)
• CVE-2012-1876 (T1585.002)
• CVE-2015-0057 (T1114.001)
• CVE-2012-2539 (T1049)
• CVE-2015-0071 (T1566.002)
• CVE-2015-1761 (T1114.001)
• CVE-2013-3660 (T1049)
• CVE-2010-0806 (T1114.001)
• CVE-2013-7331 (T1566.001)
• CVE-2015-2360 (T1114.001)
• CVE-2014-4148 (T1114.001)
• CVE-2011-3402 (T1114.001)
• CVE-2014-6324 (T1114.001)
• CVE-2015-2426 (T1114.001)
• CVE-2008-1436 (T1057)
• CVE-2010-0232 (T1114.001)
• CVE-2010-4398 (T1550.002)
• CVE-2015-2387 (T1114.001)
• CVE-2009-3129 (T1585.002)
• CVE-2010-2572 (T1114.001)
• CVE-2011-1255 (T1114.001)
• CVE-2011-0611 (T1059.003)
• CVE-2017-8570 (T1114.001)
• CVE-2015-2419 (T1114.001)
• CVE-2016-0189 (T1114.001)
• CVE-2017-0001 (T1114.001)
• CVE-2017-0143 (T1114.001)
• CVE-2025-55183 (T1114.001)
• CVE-2025-55184 (T1049)
• CVE-2010-1553 (T1566.001)
• CVE-2015-2853 (T1566.001)
• CVE-2013-5990 (T1566.001)
• CVE-2014-8361 (T1007)
• CVE-2010-2884 (T1059.003)
• CVE-2010-2883 (T1059.003)
• CVE-2012-6422 (T1049)
• CVE-2025-66478 (T1583.001)
• CVE-2026-0723 (T1583.001)
• CVE-2015-6585 (T1585.002)
• CVE-2016-9494 (T1585.002)
• CVE-2016-9496 (T1550.002)
• CVE-2016-9495 (T1585.002)
• CVE-2013-2678 (T1585.002)
• CVE-2023-1389 (T1550.002)
• CVE-2025-24893 (T1550.002)
• CVE-2026-20127 (T1016)
• CVE-2015-5122 (T1016)
• CVE-2015-3043 (T1016)
• CVE-2015-3456 (T1016)
• CVE-2015-3090 (T1016)
• CVE-2016-0984 (T1016)
• CVE-2015-0313 (T1016)
• CVE-2014-0329 (T1550.002)
• CVE-2015-5134 (T1016)
• CVE-2015-5539 (T1016)
• CVE-2015-5557 (T1016)
• CVE-2015-5563 (T1016)
• CVE-2015-5559 (T1016)
• CVE-2015-5540 (T1016)
• CVE-2015-5561 (T1016)
• CVE-2015-5551 (T1016)
• CVE-2015-5564 (T1016)
• CVE-2015-5565 (T1016)
• CVE-2015-5550 (T1016)
• CVE-2015-5566 (T1016)
• CVE-2015-5127 (T1016)
• CVE-2015-5556 (T1016)
• CVE-2015-3628 (T1016)
• CVE-2016-1287 (T1049)
• CVE-2015-8287 (T1016)
• CVE-2016-2342 (T1049)
• CVE-2012-0507 (T1016)
• CVE-2014-8439 (T1016)
• CVE-2014-0569 (T1016)
• CVE-2025-34026 (T1049)
• CVE-2015-6034 (T1049)
• CVE-2012-0056 (T1049)
• CVE-2012-1258 (T1550.002)
• CVE-2015-3636 (T1049)
• CVE-2014-3393 (T1049)
• CVE-2012-0611 (T1049)
• CVE-2025-13928 (T1049)
• CVE-2010-0188 (T1059.003)
• CVE-2010-1297 (T1059.003)
• CVE-2013-0641 (T1059.003)
• CVE-2013-0640 (T1059.003)
• CVE-2015-5477 (T1550.002)
• CVE-2014-7911 (T1550.002)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る