APT-C-60, first documented with activity tracing back to 2018 and publicly disclosed in 2021, is a cyber espionage group aligned with South Korea. Its primary motivation is information theft and intelligence gathering, targeting human resources and trade-related organizations. The group is distinguished by its consistent use of job application lures in spear-phishing campaigns, exploitation of zero-day vulnerabilities in common productivity software like WPS Office, and sophisticated abuse of legitimate cloud services such as Google Drive, Bitbucket, GitHub, and StatCounter for command and control and payload distribution. The group operates under the alias APT-Q-12.

Aliases del actor

APT-Q-12apt-c-60apt-q-12spyglaceAPT Q12

Actores similares

apt-q12actor · 1apt-c-01actor · 2apt-c-27actor · 2apt-45actor · 2apt-c-37actor · 1apt-c-23actor · 1hellsing-aptactor · 1apt-c-44actor · 1apt-c-38actor · 1apt-c-12actor · 1