Uptime Hamster: 106d 2h 51mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza Lucky Cat

Lucky Cat

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: TA413, White Dev 9, Shadow Network, SabPub, TA413 (Proofpoint), ENDTRADE, otros, operaciones de sabotaje, exilerat, luckycat, sepulcher, shadownet, ta413
Ver en IntelTracker → APTTrail →
Lucky Cat is a cyber espionage group, assessed with high confidence to be state-sponsored by China, that emerged with documented activity starting in April 2011. While initially recognized for targeting military research and shipping industries, the group, also known as TA413 and White Dev 9, has consistently focused on the Tibetan community globally for intelligence gathering and surveillance. A defining characteristic of Lucky Cat is its ability to blend the use of established toolsets, such as the Royal Road RTF weaponizer, with the rapid adoption of newly discovered zero-day vulnerabilities in its campaigns. The group primarily aims to exfiltrate sensitive information.

Aliases del actor

TA413White Dev 9Shadow NetworkSabPubTA413 (Proofpoint)ENDTRADEotrosoperaciones de sabotajeexileratluckycatsepulchershadownetta413

Actores similares

lucky-catactor · 1Network Devicesactor · 1ShadowSyndicateapt · 0Shadow Networkapt · 0devmanransomware · 184shadowbyt3actor · 130day-syndicateactor · 5Scattered Spiderthreat-actor · 2blackshadowthreat-actor · 2hellcatthreat-actor · 2

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownduckduckgo.comLucky Cat (China)
DLS / leak siteunknownduckduckgo.comLucky Cat (China)
Motivacion
Information theft and espionage
Tecnicas MITRE
T1547, T1033, T1047 - Windows Management Instrumentation, T1045 - Software Packing, T1090, T1105 - Ingress Tool Transfer
CVEs relacionadas
CVE-2025-57819, CVE-2025-49706, CVE-2025-49704, CVE-2025-34511, CVE-2025-34510, CVE-2025-34509
Tipo
apt
Pais origen
CN
Motivacion
Information theft and espionage
Impacto
73
Actualizado
Wed, 01 Ju

Paises objetivo (OSINT)

IndiaJapanMalaysia

Sectores objetivo (OSINT)

Space & DefenseNational Security&International AffairsCivic and Social OrganizationsComputer Systems Design and Related Services