Threat actor · G0050

APT32

Also known as SeaLotus, OceanLotus, APT-C-00, Canvas Cyclone, BISMUTH.

APT32 is a suspected Vietnam-based threat group that has been active since at least 2014. The group has targeted multiple private sector industries as well as foreign governments, dissidents, and journalists with a strong focus on Southeast Asian countries like Vietnam, the Philippines, Laos, and Cambodia. They have extensively used strategic web compromises to compromise victims.

ATT&CK techniques