APT30
APT30 is a threat group suspected to be associated with the Chinese government. While Naikon shares some characteristics with APT30, the two groups do not appear to be exact matches.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--f047ee18-7985-4946-8bfb-4ed754d3a0dd
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-01T16:36:58+00:00
- Origin source
- attack_description
- Type
- intrusion-set
- Origin country
- CN
MITRE ATT&CK Techniques (2)
An adversary may rely upon a user opening a malicious file in order to gain execution. Users may be subjected to social engineering to get them to ope
Adversaries may send spearphishing emails with a malicious attachment in an attempt to gain access to victim systems. Spearphishing attachment is a sp
Software & Tools (5)
BACKSPACE is a backdoor used by APT30 that dates back to at least
FLASHFLOOD is malware developed by APT30 that allows propagation a
NETEAGLE is a backdoor developed by APT30 with compile dates as ea
SHIPSHAPE is malware developed by APT30 that allows propagation an
SPACESHIP is malware developed by APT30 that allows propagation an
Explore this actor's full graph with Ninja Signal