Chinese-Speaking Group
· Published 21/12/2025 12:22 · Modified 21/12/2025 12:22
· Source: AlienVault
Essential information
- Confidence
- 100/100
- Published
- 21/12/2025 12:22
- Modified
- 21/12/2025 12:22
- Updated at
- 21/12/2025 12:22
- Revoked
- No
- Author / Source
- AlienVault
- Resource level
- —
- Primary motivation
- —
- Related entities
- 1 reports, 9 attack patterns (mitre), 1 malware, 4 sectors, 9 countries, 132 indicators
Description
No description.
Marking (TLP)
TLP:CLEAR
Related entities
Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.
Reports (1)
-
9 MITREs 1 Malware 137 Observables 1 APT
Attack patterns (MITRE) (9)
-
T1112 usesModify Registry MITRE
-
T1505.003 usesWeb Shell MITRE
-
T1102.003 usesOne-Way Communication MITRE
-
T1573.002 usesAsymmetric Cryptography MITRE
-
T1071.001 usesWeb Protocols MITRE
-
T1204.001 usesMalicious Link MITRE
-
T1059.003 usesWindows Command Shell MITRE
-
T1190 usesExploit Public-Facing Application MITRE
-
T1140 usesDeobfuscate/Decode Files or Information MITRE
Malware (1)
-
BadIIS usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Sectors (4)
-
Education targets
-
Technology targets
-
Telecommunications targets
-
Government targets
Countries (9)
-
Japan targets
-
India targets
-
Philippines targets
-
Singapore targets
-
Thailand targets
-
Bangladesh targets
-
Taiwan targets
-
British Indian Ocean Territory targets
-
Brazil targets
Indicators (132)
-
bb.vdfskis888.comindicates -
bbf9d7dafba979ef9c1e8531a20d3bea1adcdbb628816ce8781d7eeb6292f265indicates -
02dba6f34480eac1d27c83a4ff06e3ba03fc63fcf3067e0957375bfd182ed39bindicates -
c75a9a104e340473b72140127f3039a08f99a334887afc100d09cffa3c4c8e24indicates -
newthmap.googlecache.ccindicates -
e927d6ea1fdc27c0ae9eb55254bbbd4f501f14ae02e499d7d20cdd83af479b20indicates -
f1dcd2809a001a0d0ea3221939f7afd2ef9e5bf468709bd91abd70c902c42d45indicates -
js.cloudflare.cyouindicates -
jumpsexxx.comindicates -
381dc36504e1b319fde9bbae0a580da9f239b8af8066638f9a4203e58dc16087indicates -
coronavg99.xyzindicates