QUILTED TIGER
ChinastratsPatchworkMonsoonSaritDropping ElephantAPT-C-09ZINC EMERSONATK11G0040Orange AthosThirsty GeminiHangover GroupOperation Hangover
Dropping Elephant (also known as “Chinastrats” and “Patchwork“) is a relatively new threat actor that is targeting a variety of high profile diplomatic and economic targets using a custom set of attack tools. Its victims are all involved with China’s foreign relations in some way, and are generally caught through spear-phishing or watering hole attacks. Fuente: MISP
País atribuido: IN según MISP
Actividad en Jábega · 12 semanas
1 noticias · vista por primera vez el 27 oct 2026 · la última, el 27 oct 2026
Noticias
- So Many AI Security Benchmarks, But None Tell the Whole StoryDark Reading · 27 oct 2026
Técnicas MITRE ATT&CK
Reconocimiento
Preparación de recursos
Acceso inicial
T1189Drive-by Compromise 3 reglas SigmaT1566.001Spearphishing Attachment 21 reglas SigmaT1566.002Spearphishing Link 3 reglas Sigma
Ejecución
T1053.005Scheduled Task 40 reglas SigmaT1059.001PowerShell 40 reglas SigmaT1059.003Windows Command Shell 40 reglas SigmaT1059.005Visual Basic 28 reglas SigmaT1197BITS Jobs 13 reglas SigmaT1203Exploitation for Client Execution 31 reglas SigmaT1204.001Malicious Link 4 reglas SigmaT1204.002Malicious File 32 reglas SigmaT1559.002Dynamic Data Exchange 1 reglas SigmaT1574.001DLL 40 reglas Sigma
Persistencia
Escalada de privilegios
Acceso a credenciales
Descubrimiento
T1033System Owner/User Discovery 26 reglas SigmaT1082System Information Discovery 18 reglas SigmaT1083File and Directory Discovery 17 reglas SigmaT1518.001Security Software Discovery 5 reglas SigmaT1680Local Storage Discovery
Movimiento lateral
Recopilación
T1005Data from Local System 12 reglas SigmaT1074.001Local Data Staging 4 reglas SigmaT1119Automated Collection 5 reglas SigmaT1560Archive Collected Data 11 reglas Sigma
Mando y control
T1102.001Dead Drop Resolver 4 reglas SigmaT1105Ingress Tool Transfer 40 reglas SigmaT1132.001Standard Encoding 4 reglas Sigma
Stealth
T1027.001Binary Padding 2 reglas SigmaT1027.002Software PackingT1027.005Indicator Removal from Tools 4 reglas SigmaT1027.010Command Obfuscation 8 reglas SigmaT1036.005Match Legitimate Resource Name or Location 20 reglas SigmaT1070.004File Deletion 9 reglas Sigma
Defense impairment
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗