40
Indicators
Properties
- Summary
- Chinese-speaking espionage group focused on Japan, documented by Kaspersky in August 2015 and tracked by Symantec as CloudyOmega. Responsible for the Japan Pension Service breach of May 2015. Spear-phishing with the EMDIVI backdoor, later drive-by downloads using the Flash zero-day CVE-2015-5119 fro
- Summary source
- written 2026-10-25 from public vendor reporting (Citizen Lab 2015; Kaspersky/Symantec 2015; Kaspersky 2015; Mandiant 2020); not in ATT&CK
- In Signal since
- initial import (Sep 2026)
Explore this actor's full graph with Ninja Signal