DEV-0147 is a China-based state-sponsored cyber espionage actor that first emerged in February 2023, notably expanding its operations to target diplomatic entities in South America, a region distinct from its traditional focus on government agencies and think tanks in Asia and Europe. The group's primary motivation is cyber espionage and data exfiltration. DEV-0147 is distinguished by its consistent use of established hacking tools like ShadowPad, QuasarLoader, and Cobalt Strike in its campaigns. The moniker DEV-0147 is used by Microsoft to track this emerging threat cluster.

Actores similares

devmanransomware · 184Network Devicesactor · 1Compromise Software Dependencies and Development Toolsactor · 1Device Driver Discoveryactor · 1CS FQL: 32. Detect Data Exfiltration via external storage devicesactor · 1dev-0322actor · 1dev-0343actor · 1weredevilsactor · 1DEV-0586apt · 0Red Dev 17apt · 0