Skip to content

TA459

TA459 is a threat group believed to operate out of China that has targeted countries including Russia, Belarus, Mongolia, and others.

ATT&CK ID: G0062
Techniques: 4
Tools: 4

Vulnerabilities it has exploited

CVE-2017-0199 Microsoft Office and WordPadUnscored · exploited in the wild

Techniques

Initial Access

Execution

Command and Scripting Interpreter Exploitation for Client Execution User Execution

Software

NetTraveler · PlugX · ZeroT · gh0st RAT

MITRE ATT&CK All threat actors