APT12
APT12 is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.
- ATT&CK ID
- G0005
- Origin
- China
- Techniques
- 5
- Tools
- 3
Also tracked as IXESHE · DynCalc · Numbered Panda · DNSCALC
Vulnerabilities it has exploited
- CVE-2009-0927 Adobe Reader and AcrobatUnscored · exploited in the wild
- CVE-2009-3129 Microsoft ExcelUnscored · exploited in the wild
- CVE-2009-4324 Adobe Acrobat and ReaderUnscored · exploited in the wild
- CVE-2011-0609 Adobe Flash PlayerUnscored · exploited in the wild
- CVE-2011-0611 Adobe Flash PlayerUnscored · exploited in the wild
- CVE-2012-0158 Microsoft MSCOMCTL.OCXUnscored · exploited in the wild
Techniques
Initial Access
Execution
Exploitation for Client ExecutionUser Execution
Command and Control
Software
HTRAN · Ixeshe · RIPTIDE