Misplaced Pages

APT40, also known as BRONZE MOHAWK (by Secureworks), FEVERDREAM, G0065, GADOLINIUM (formerly by Microsoft), Gingham Typhoon (by Microsoft), GreenCrash, Hellsing (by Kaspersky), Kryptonite Panda (by Crowdstrike), Leviathan (by Proofpoint), MUDCARP, Periscope, Temp.Periscope, and Temp.Jumper, is an advanced persistent threat operated by the Hainan State Security Department, a branch of the Chinese Ministry of State Security located in Haikou, Hainan, China, and has been active since at least 2009.

APT40 has targeted governmental organizations, companies, and universities in a wide range of industries, including biomedical, robotics, and maritime research, across the United States, Canada, Europe, the Middle East, and the South China Sea area, as well as industries included in China's Belt and Road Initiative. APT40 is closely connected to Hafnium.

History

On July 19, 2021, the U.S. Department of Justice (DOJ) unsealed an indictment against four APT40 cyber actors for their illicit computer network exploitation activities via front company Hainan Xiandun Technology Development Company.

In March 2024, the New Zealand Government and its signals intelligence agency Government Communications Security Bureau accused the Chinese government via APT40 of breaching its parliamentary network in 2021. In July 2024, eight nations released a joint advisory on APT40.

See also

• Cyberwarfare by China
• Red Apollo

References

1. "BRONZE MOHAWK | Secureworks". Archived from the original on 2022-07-02. Retrieved 2022-07-27.
2. "Microsoft Security—detecting empires in the cloud". Microsoft. 24 September 2020. Archived from the original on 27 July 2022. Retrieved 27 July 2022.
3. "How Microsoft names threat actors". Microsoft. Archived from the original on 10 July 2024. Retrieved 21 January 2024.
4. "Hellsing Targeted Attacks". 13 January 2021. Archived from the original on 27 July 2022. Retrieved 27 July 2022.
5. "Leviathan: Espionage actor spearphishes maritime and defense targets | Proofpoint US". 16 October 2017. Archived from the original on 28 May 2022. Retrieved 27 July 2022.
6. ^ National Cyber Awareness System (19 July 2021). "Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China's MSS Hainan State Security Department". Cybersecurity and Infrastructure Security Agency. Archived from the original on 19 July 2021. Retrieved 19 July 2021.
7. Mackie, Kurt (July 19, 2021). "White House Says China's APT40 Responsible for Exchange Hacks, Ransomware Attacks -- Redmondmag.com". Redmondmag. Archived from the original on May 17, 2022. Retrieved April 24, 2022.
8. Pearse, Adam (26 March 2024). "Parliament systems targeted by China-based hackers". The New Zealand Herald. Archived from the original on 26 March 2024. Retrieved 28 March 2024.
9. Cherney, Mike (July 9, 2024). "U.S., Allies Issue Rare Warning on Chinese Hacking Group". The Wall Street Journal. Archived from the original on July 9, 2024. Retrieved July 9, 2024.

v t e Ministry of State Security
(MSS Headquarters: Yidongyuan, Xiyuan, Haidian District, Beijing, China)
Organization	Headquarters bureaus Confidential Communication International Intelligence Political & Economic Intelligence Taiwan, Hong Kong and Macao Analysis and Dissemination Operational Guidance Counterespionage Counterespionage Investigation Internal Security External Security CICIR Social Investigation Bureau CICEC CNITSEC CNNVD Technical Reconnaissance Institute of Taiwan Studies Imaging Intelligence Enterprises United States California Counterterrorism Municipal bureaus Beijing Detention Center Chongqing Shanghai Tianjin Provincial departments Anhui Fujian Gansu Guangdong Guizhou Hainan Hebei Heilongjiang Henan Hubei Hunan Jiangsu Jiangxi Jilin Liaoning Qinghai Shaanxi Shandong Shanxi Sichuan Yunnan Zhejiang Departments in autonomous regions Guangxi Inner Mongolia Ningxia Tibet Xinjiang XPCC Schools University of International Relations Hangzhou [zh] Jiangnan Social University Research institutes Nanjing Institute of Information Technology Front organizations Nanshan Temple Guanyin of Nanshan China Institute for Innovation and Development Strategy China National Technical Import and Export Corporation
Ministers	Ling Yun Jia Chunwang Xu Yongyue Geng Huichang Chen Wenqing Chen Yixin
Major international operations	Chinese intelligence activity abroad Cyberwarfare by China China's peaceful rise
Notable works	State Security Bulletin Journal of Jiangnan Social University Contemporary International Relations
Activities by country	Canada United States African Union

• Cyberespionage units of the Ministry of State Security (China)
• Provincial organs of the Ministry of State Security (China)
• Organizations based in Haikou