Elderwood

Threat Actors · Elderwood

· ATT&CK GroupG0066

Elderwood GangBeijing GroupSneaky Panda

Techniques

Software

Tactics

Aliases

Description

Elderwood is a suspected Chinese cyber espionage group that was reportedly responsible for the 2009 Google intrusion known as Operation Aurora. (Citation: Security Affairs Elderwood Sept 2012) The group has targeted defense organizations, supply chain manufacturers, human rights and nongovernmental organizations (NGOs), and IT service providers. (Citation: Symantec Elderwood Sept 2012) (Citation: CSM Elderwood Sept 2012)

Tactic Coverage

initial access (3)execution (3)stealth (2)command and control (1)

Techniques Used (9)

T1027.002Software Packing

stealth

T1027.013Encrypted/Encoded File

stealth

T1105Ingress Tool Transfer

command and control

T1189Drive-by Compromise

initial access

T1203Exploitation for Client Execution

execution

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 9 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (9)

S0204Bribamalware S0203Hydraqmalware S0211Linfomalware S0205Naidmalware S0210Nerexmalware S0208Pasammalware S0012PoisonIvymalware S0207Vasport

References (8)

https://attack.mitre.org/groups/G0066 https://www.csmonitor.com/USA/2012/0914/Stealing-US-business-secrets-Experts-ID-two-huge-cyber-gangs-in-China https://web.archive.org/web/20190717233006/http:/www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf http://securityaffairs.co/wordpress/8528/hacking/elderwood-project-who-is-behind-op-aurora-and-ongoing-attacks.html