Trusted Design

APT1

アクターID: G0006

· MITRE Pageへのリンク

脅威アクターの詳細

APT1 is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398. (Citation: Mandiant APT1)

脅威アクターの別名・別称

APT1
Comment Crew
Comment Group
Comment Panda

利用した攻撃手法

• T1560.001 - Archive via Utility
• T1218.013 - Mavinject
• T1587.003 - Digital Certificates
• T1592.001 - Hardware
• T1543.003 - Windows Service
• T1598.003 - Spearphishing Link
• T1487 - Disk Structure Wipe
• T1003.007 - Proc Filesystem
• T1007 - System Service Discovery
• T1584.003 - Virtual Private Server
• T1098.007 - Additional Local or Domain Groups
• T1183 - Image File Execution Options Injection
• T1546.005 - Trap
• T1590.006 - Network Security Appliances
• T1136.002 - Domain Account
• T1055.004 - Asynchronous Procedure Call
• T1583.006 - Web Services
• T1199 - Trusted Relationship
• T1204.003 - Malicious Image
• T1591.004 - Identify Roles
• T1668 - Exclusive Control
• T1622 - Debugger Evasion
• T1053.002 - At

関連するCVE (攻撃手法に関連)

• CVE-2015-4495 (T1560.001)
• CVE-2015-5749 (T1136.002)
• CVE-2016-1898 (T1183)
• CVE-2016-1897 (T1183)
• CVE-2015-7261 (T1560.001)
• CVE-2015-6036 (T1560.001)
• CVE-2015-7262 (T1560.001)
• CVE-2015-0932 (T1560.001)
• CVE-2010-3081 (T1003.007)
• CVE-2017-16929 (T1598.003)
• CVE-2025-31125 (T1183)
• CVE-2025-68645 (T1560.001)
• CVE-2014-4114 (T1598.003)
• CVE-2015-1770 (T1622)
• CVE-2012-1856 (T1587.003)
• CVE-2015-2545 (T1598.003)
• CVE-2015-2546 (T1587.003)
• CVE-2014-6332 (T1587.003)
• CVE-2017-0199 (T1622)
• CVE-2017-12149 (T1587.003)
• CVE-2015-2424 (T1587.003)
• CVE-2015-0097 (T1587.003)
• CVE-2012-0158 (T1055.004)
• CVE-2014-1761 (T1598.003)
• CVE-2015-2502 (T1587.003)
• CVE-2014-6271 (T1591.004)
• CVE-2014-4113 (T1587.003)
• CVE-2012-1889 (T1587.003)
• CVE-2015-1641 (T1587.003)
• CVE-2015-1701 (T1587.003)
• CVE-2012-4969 (T1591.004)
• CVE-2017-0263 (T1587.003)
• CVE-2017-0261 (T1055.004)
• CVE-2017-0262 (T1055.004)
• CVE-2016-6532 (T1546.005)
• CVE-2017-3212 (T1587.003)
• CVE-2025-55182 (T1055.004)
• CVE-2013-3906 (T1587.003)
• CVE-2014-6352 (T1199)
• CVE-2015-0016 (T1598.003)
• CVE-2010-3333 (T1587.003)
• CVE-2012-4792 (T1668)
• CVE-2014-0322 (T1587.003)
• CVE-2013-0074 (T1587.003)
• CVE-2013-2551 (T1590.006)
• CVE-2014-1776 (T1183)
• CVE-2012-1876 (T1183)
• CVE-2015-0057 (T1587.003)
• CVE-2012-2539 (T1055.004)
• CVE-2015-0071 (T1543.003)
• CVE-2015-1761 (T1587.003)
• CVE-2013-3660 (T1055.004)
• CVE-2010-0806 (T1587.003)
• CVE-2013-7331 (T1598.003)
• CVE-2015-2360 (T1587.003)
• CVE-2014-4148 (T1587.003)
• CVE-2011-3402 (T1587.003)
• CVE-2014-6324 (T1587.003)
• CVE-2015-2426 (T1587.003)
• CVE-2008-1436 (T1583.006)
• CVE-2010-0232 (T1587.003)
• CVE-2010-4398 (T1668)
• CVE-2015-2387 (T1587.003)
• CVE-2009-3129 (T1183)
• CVE-2010-2572 (T1587.003)
• CVE-2011-1255 (T1587.003)
• CVE-2011-0611 (T1591.004)
• CVE-2017-8570 (T1587.003)
• CVE-2015-2419 (T1587.003)
• CVE-2016-0189 (T1587.003)
• CVE-2017-0001 (T1587.003)
• CVE-2017-0143 (T1587.003)
• CVE-2025-55183 (T1587.003)
• CVE-2025-55184 (T1055.004)
• CVE-2010-1553 (T1598.003)
• CVE-2015-2853 (T1598.003)
• CVE-2013-5990 (T1598.003)
• CVE-2014-8361 (T1003.007)
• CVE-2010-2884 (T1591.004)
• CVE-2010-2883 (T1591.004)
• CVE-2012-6422 (T1055.004)
• CVE-2025-66478 (T1098.007)
• CVE-2026-0723 (T1098.007)
• CVE-2015-6585 (T1183)
• CVE-2016-9494 (T1183)
• CVE-2016-9496 (T1668)
• CVE-2016-9495 (T1183)
• CVE-2013-2678 (T1183)
• CVE-2023-1389 (T1668)
• CVE-2025-24893 (T1668)
• CVE-2026-20127 (T1590.006)
• CVE-2015-5122 (T1590.006)
• CVE-2015-3043 (T1590.006)
• CVE-2015-3456 (T1590.006)
• CVE-2015-3090 (T1590.006)
• CVE-2016-0984 (T1590.006)
• CVE-2015-0313 (T1590.006)
• CVE-2014-0329 (T1668)
• CVE-2015-5134 (T1590.006)
• CVE-2015-5539 (T1590.006)
• CVE-2015-5557 (T1590.006)
• CVE-2015-5563 (T1590.006)
• CVE-2015-5559 (T1590.006)
• CVE-2015-5540 (T1590.006)
• CVE-2015-5561 (T1590.006)
• CVE-2015-5551 (T1590.006)
• CVE-2015-5564 (T1590.006)
• CVE-2015-5565 (T1590.006)
• CVE-2015-5550 (T1590.006)
• CVE-2015-5566 (T1590.006)
• CVE-2015-5127 (T1590.006)
• CVE-2015-5556 (T1590.006)
• CVE-2015-3628 (T1590.006)
• CVE-2016-1287 (T1055.004)
• CVE-2015-8287 (T1590.006)
• CVE-2016-2342 (T1055.004)
• CVE-2012-0507 (T1590.006)
• CVE-2014-8439 (T1590.006)
• CVE-2014-0569 (T1590.006)
• CVE-2025-34026 (T1055.004)
• CVE-2015-6034 (T1055.004)
• CVE-2012-0056 (T1055.004)
• CVE-2012-1258 (T1668)
• CVE-2015-3636 (T1055.004)
• CVE-2014-3393 (T1055.004)
• CVE-2012-0611 (T1055.004)
• CVE-2025-13928 (T1055.004)
• CVE-2010-0188 (T1591.004)
• CVE-2010-1297 (T1591.004)
• CVE-2013-0641 (T1591.004)
• CVE-2013-0640 (T1591.004)
• CVE-2015-5477 (T1668)
• CVE-2014-7911 (T1668)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る