Blackgear, also known by the aliases Topgear and Comnie, is a persistent cyber espionage threat actor that has been active since at least 2008. The group is assessed with moderate confidence to be of Chinese origin, consistently targeting entities in East Asia. Its primary motivation is intelligence gathering, focusing on public sector agencies, telecommunications, and high-technology industries. What specifically sets Blackgear apart is its unique behavior of abusing legitimate blogging, microblogging, and social media platforms to hide its command-and-control (C2) configuration, which enables rapid changes to C2 servers and prolongs its presence within compromised systems. The group typically employs a two-stage infection process, with initial efforts often dedicated to reconnaissance before full system compromise.

Aliases del actor

ComnieTopgearAPT BLACKGEARProtuxEliriks

Actores similares

apt-blackgearactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1