Uptime Hamster: 106d 2h 51mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza IronHusky

IronHusky

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: MysterySnail, CVE-2021-40449, Vicious Panda, DNSep, ironhusky, nccTrojan, phantomnet, piratepanda, portdoor, smanager
Ver en IntelTracker → APTTrail →
IronHusky is a Chinese-speaking cyber espionage group first observed in mid-2017, operating with a primary motivation of information theft and espionage, particularly focusing on tracking geopolitical agendas. The group initially leveraged common Remote Access Trojans (RATs) such as PlugX and PoisonIvy but has since evolved its custom malware capabilities, notably developing and continuously upgrading the MysterySnail RAT and its streamlined variant, MysteryMonoSnail. IronHusky is distinguished by its focused targeting of a specific geopolitical agenda, shifting its attention from Russian military contractors to Mongolian government entities in early 2018. The group has also been identified by the alias BBCY-TA1.

Aliases del actor

MysterySnailCVE-2021-40449Vicious PandaDNSepironhuskynccTrojanphantomnetpiratepandaportdoorsmanager

Actores similares

vicious-pandaactor · 1Vicious Pandaapt · 0anchor-pandaactor · 1aquatic-pandaactor · 1big-pandaactor · 1electric-pandaactor · 1eloquent-pandaactor · 1emissary-pandaactor · 1foxy-pandaactor · 1goblin-pandaactor · 1
Motivacion
Information theft and espionage
Tecnicas MITRE
T1547 - Boot or Logon Autostart Execution, T1574 - Hijack Execution Flow, T1059.001, T1049 - System Network Connections Discovery, T1090 - Proxy, T1525 - Implant Internal Image
CVEs relacionadas
CVE-2024-3721, CVE-2021-40449, CVE-2021-28310, CVE-2020-0986, CVE-2017-11882, CVE-2016-3309
Tipo
apt
Pais origen
CN
Motivacion
Information theft and espionage
Impacto
35
Actualizado
Wed, 08 No

Paises objetivo (OSINT)

Mongolia

Sectores objetivo (OSINT)

FinancePublic AdministrationNational Security&International AffairsSpace & DefenseComputer Systems Design Services