Loading threat actor…
APT14 is a China-associated cyber threat group linked to historical malicious activity between 2009 and 2011. Infrastructure associated with this activity exhibited domain-registration and parking characteristics also observed in later BADBAZAAR infrastructure. These similarities do not establish that APT14 operated BADBAZAAR or participated in its mobile-surveillance campaigns. Detailed targeting, operational techniques, organizational affiliations, and additional aliases are not established.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 malware family Mallory has associated with this actor across public reporting.
1 indicator attributed to this actor. Values are masked here and available in full in Mallory.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.