Uptime Hamster: 15d 12h 10mDeploy: 13 Jul 2026 08:04Updated: 2026-07-13
Logo del actor de amenaza BlackTech

BlackTech

1 incidentes 1 paises 0 sectores apt CN Ultimo: 2026-05-25
Aliases: CIRCUIT PANDA, Canary Typhoon, Earth Hundun, G0098, HUAPI, Manga Taurus, Mobwork, Palmerworm, Red Djinn, T-APT-03, Temp.Overboard, APT BLACKTECH, Phantom of Routers, PLEAD, Shrouded Crossbow, Waterbear
Ver en IntelTracker → APTTrail →
BlackTech is a suspected Chinese state-sponsored cyber espionage group that has been active since at least 2010, continually evolving its tools and strategies. The group is attributed to China, assessed with high confidence to be operating at the direction of Chinese intelligence departments or military cyber units, and primarily focused on cyber espionage rather than monetary gain. Its main motivation is to collect intelligence, establish surveillance of government and military assets, and maintain access to telecommunications and network infrastructures to support China's geopolitical ambitions. What sets BlackTech apart is its infrastructure-centric approach, concentrating on compromising network infrastructure like edge devices, VPNs, and routers, rather than solely targeting endpoints. The group is known for its stealth and persistence, employing sophisticated methods such as modifying router firmware to conceal activities and maintain long-term access, and using stolen code-signi

Aliases del actor

CIRCUIT PANDACanary TyphoonEarth HundunG0098HUAPIManga TaurusMobworkPalmerwormRed DjinnT-APT-03Temp.OverboardAPT BLACKTECHPhantom of RoutersPLEADShrouded CrossbowWaterbear

Actores similares

apt-blacktechactor · 1apt-earthhundunactor · 1Temper Pandaapt · 0Predator Pandaapt · 0apt-earthberberokaactor · 1apt-earthwendigoactor · 1apt-flaxtyphoonactor · 1apt-redbaldknightactor · 1apt-redfoxtrotactor · 1apt-redjuliettactor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownapp.validin.comAPT BLACKTECH indicators and references
DLS / leak siteunknownblog.jpcert.or.jpAPT BLACKTECH indicators and references
DLS / leak siteunknowndmpdump.github.ioAPT BLACKTECH indicators and references
DLS / leak siteunknowninsight-jp.nttsecurity.comAPT BLACKTECH indicators and references
DLS / leak siteunknownotx.alienvault.comAPT BLACKTECH indicators and references
X/Twitterunknowntwitter.comAPT BLACKTECH indicators and references
X/Twitterunknowntwitter.comAPT BLACKTECH indicators and references
X/Twitterunknowntwitter.comAPT BLACKTECH indicators and references
X/Twitterunknowntwitter.comAPT BLACKTECH indicators and references
DLS / leak siteunknownunit42.paloaltonetworks.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
Repositoriounknowngithub.comAPT BLACKTECH indicators and references
DLS / leak siteunknownraw.githubusercontent.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
DLS / leak siteunknownwww.virustotal.comAPT BLACKTECH indicators and references
DLS / leak siteunknownapp.validin.comAPT BLACKTECH indicators and references
DLS / leak siteunknownblog.jpcert.or.jpAPT BLACKTECH indicators and references
X/Twitterunknownotx.alienvault.comAPT BLACKTECH indicators and references
Motivacion