APT12

Origin🇨🇳 China

Techniques (MITRE ATT&CK)5

SourceMITRE ATT&CK

State sponsor: ChinaAttribution confidence: 50%Target categories: Private sector, Government

Targeted regions: Taiwan · Japan

Also known as:BRONZE GLOBEBeeBusCalc TeamCrimson IronDNSCALCDNSCalcDynCalcGroup 22Hexagon TyphoonIXESHENUMBERED PANDANumbered PandaTG-2754

About the group

APT12 is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.

Attack chain

Plausible scenario built from the group's real techniques, ordered by the phases of an attack. Each step shows how the group typically operates.

Arsenal severity39

Impact: High

Illustrative chain derived from techniques documented in MITRE ATT&CK — it does not represent a specific past attack. Severity summarizes the known arsenal (kill-chain coverage, actively exploited CVEs, techniques).

Techniques (MITRE ATT&CK) 5

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Initial access

Spearphishing Attachment

Execution

Exploitation for Client Execution Malicious File

Command and control

Bidirectional Communication DNS Calculation

Exploited vulnerabilities 6

CVEs this group is known to exploit, per MITRE ATT&CK. Ordered by real-world severity.

CVE-2012-0158HIGHEPSS 100%KEV MITRE ATT&CK

CVE-2011-0611HIGHEPSS 99%KEV MITRE ATT&CK

CVE-2009-0927HIGHEPSS 97%KEV MITRE ATT&CK

CVE-2009-3129HIGHEPSS 84%KEV MITRE ATT&CK

CVE-2009-4324HIGHEPSS 82%KEV MITRE ATT&CK

CVE-2011-0609HIGHEPSS 64%KEV MITRE ATT&CK

References

APT12 uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →