Elderwood
Elderwood is a suspected Chinese cyber espionage group that was reportedly responsible for the 2009 Google intrusion known as Operation Aurora. The group has targeted defense organizations, supply chain manufacturers, human rights and nongovernmental organizations (NGOs), and IT service providers.
- ATT&CK ID
- G0066
- Origin
- China
- Techniques
- 6
- Tools
- 9
Also tracked as Elderwood Gang · Beijing Group · Sneaky Panda
Techniques
Initial Access
Execution
Exploitation for Client ExecutionUser Execution
Stealth
Obfuscated Files or Information
Command and Control
Software
Briba · Hydraq · Linfo · Naid · Nerex · Pasam · PoisonIvy · Vasport · Wiarp