Danti, also known as APT16 and Group 73, is a state-sponsored cyber espionage group assessed with high confidence to be of Chinese origin. The group emerged as early as 2013 and primarily conducts operations targeting government institutions in the Asia-Pacific region, including Japan, Taiwan, and India. Their core motivation is cyber espionage, focusing on intelligence gathering and intellectual property theft. Danti distinguishes itself through its consistent use of spear-phishing attacks combined with the exploitation of known vulnerabilities in widely used software, particularly Microsoft Office documents, to deliver custom malware such as the ELMER backdoor.

Aliases del actor

CVE-2015-2545se ha relacionado con países como KazajistánKirguistánUzbekestánMyanmarNepalFilippinasprobablemente vinculado a otros grupos como NetTravellerDragonOK"74828""cve-2015-2545-overview-of-current-threats"

Actores similares

night-dragonactor · 1aoqin-dragonactor · 1sharp-dragon--chkptactor · 1Aoqin Dragonthreat-actor · 1Night Dragonapt · 1Amaranth-Dragonapt · 0Camaro Dragonapt · 0Moshen Dragonapt · 0Operation Dragon Castlingapt · 0contiransomware · 351