Threat group.View on attack.mitre.org
APT17 is a China-based threat group that has conducted network intrusions against U.S. government entities, the defense industry, law firms, information technology companies, mining companies, and non-government organizations.
| Technique | Procedure example |
|---|---|
| T1583.006 Web Services |
APT17 has created profile pages in Microsoft TechNet that were used as C2 infrastructure. |
| T1585 Establish Accounts |
APT17 has created and cultivated profile pages in Microsoft TechNet. To make profile pages appear more legitimate, APT17 has created biographical sections and posted in forum threads. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
