Threat actor · G0073

APT19

Also known as Codoso, C0d0so0, Codoso Team, Sunshop Group.

APT19 is a Chinese-based threat group that has targeted a variety of industries, including defense, finance, energy, pharmaceutical, telecommunications, high tech, education, manufacturing, and legal services. In 2017, a phishing campaign was used to target seven law and investment firms. Some analysts track APT19 and Deep Panda as the same group, but it is unclear from open source information if the groups are the same.

ATT&CK techniques

21 mapped

T1016 T1027.010 T1027.013 T1033 T1059 T1059.001 T1071.001 T1082 T1112 T1132.001 T1140 T1189 T1204.002 T1218.010 T1218.011 T1543.003 T1547.001 T1564.003 T1566.001 T1574.001 T1588.002