Threat Actor
APT16
Also known as: APT16
APT16 is a China-based threat group that has launched spearphishing campaigns targeting Japanese and Taiwanese organizations.
1
Techniques
1
Software
0
indicators on this record
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--d6e88e18-81e8-4709-82d8-973095da1e70
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-02T12:53:29+00:00
- Origin source
- attack_description
- Type
- intrusion-set
- Origin country
- CN
MITRE ATT&CK Techniques (1)
▸
Server (T1584.004)
Adversaries may compromise third-party servers that can be used during targeting. Use of servers allows an adversary to stage, launch, and execute an
Software & Tools (1)
▸
ELMER [malware]
ELMER is a non-persistent, proxy-aware HTTP backdoor written in Delphi that has been used by [APT16](https:
Explore this actor's full graph with Ninja Signal