Uptime Hamster: 108d 0h 23mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza APT 6

APT 6

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: 1.php Group, 1, deadringer
Ver en IntelTracker → APTTrail →
APT 6 is a cyber espionage group assessed with high confidence to be based in China, whose primary motivation is information theft and espionage. The group first emerged with documented activity as far back as 2011, though some reporting suggests operations may have begun as early as 2008. They gained notoriety following an FBI bulletin in 2016 that revealed multi-year intrusions into US government computer systems and sensitive commercial networks, from which they stole proprietary data. The group was observed to be dormant by FireEye as of April 2016, with their command and control infrastructure domains suspended in late 2015. This group is also known by the alias "1.php Group".

Aliases del actor

1.php Group1deadringer

Actores similares

apt-equationgroupactor · 1apt-group5actor · 1apt-c-01actor · 2apt-c-27actor · 2apt-45actor · 2apt-c-37actor · 1apt-c-23actor · 1hellsing-aptactor · 1apt-c-44actor · 1apt-c-38actor · 1
Motivacion
Information theft and espionage
Tecnicas MITRE
T1486, T1518.001, T1573, T1090, T1497.001, T1059 - Command and Scripting Interpreter
CVEs relacionadas
CVE-2026-22584, CVE-2026-1731, CVE-2026-1340, CVE-2026-1281, CVE-2025-9713, CVE-2025-9491
Tipo
apt
Pais origen
CN
Motivacion
Information theft and espionage
Impacto
81
Actualizado
Wed, 01 Ju

Paises objetivo (OSINT)

United KingdomUnited States

Sectores objetivo (OSINT)

ConstructionTransportation&WarehousingPublic AdministrationElectrical&Electronical ManufacturingTelecommunicationsSpace & DefenseAutomotiveAir TransportationComputer Systems Design and Related ServicesArchitectural Services