Antlion is a Chinese state-sponsored cyber espionage group active since at least 2011, primarily motivated by information theft and espionage, focusing on data exfiltration and long-term persistence within targeted networks. This threat actor is known for its ability to maintain prolonged access in victim environments, sometimes for several months, to conduct detailed reconnaissance and exfiltrate sensitive information. The group operates under multiple names, including Pirate Panda and Tropic Trooper, and is sometimes conflated with the malware family KeyBoy, which it also employs. Antlion's operational approach emphasizes well-planned, resource-intensive intrusions with a high degree of operational security and technical expertise, distinguishing it through its sustained, stealthy presence and the deployment of custom backdoors.

Aliases del actor

XpackJpgRunEHAGBPSLNetSessionEnumlo que sugiere una amplia gama de operaciones cibernéticas

Actores similares

lunalockransomware · 2Masquerade File Typeactor · 1Gamaredon Groupapt · 1eloquent-pandaactor · 1lunar-spideractor · 1anunakactor · 1Caramel Tsunamiapt · 0Water Gamayunapt · 0Carmine Tsunamiapt · 0LUNAR SPIDERapt · 0