Uptime Hamster: 106d 2h 51mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza Mikroceen

Mikroceen

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: Microcin, BYEBY, otros
Ver en IntelTracker → APTTrail →
Mikroceen is a cyber espionage group of Chinese origin, first documented in late 2017, primarily focused on intelligence gathering from high-profile networks in Central Asia. The group is distinguished by its use of a continuously developed custom Remote Access Tool (RAT), which ESET named Mikroceen, characterized by enhanced client-server connection security through certificates, evolving from similarities with the older Gh0st RAT. The intentional misspelling of the name Mikroceen prevents confusion with established microbiological terms. This group is also known by the alias SixLittleMonkeys (Kaspersky) and its operations have been linked to previously reported campaigns such as Kaspersky's Microcin, Palo Alto Networks' BYEBY, and Checkpoint's Vicious Panda.

Aliases del actor

MicrocinBYEBYotros
Motivacion
Information theft and espionage
Tecnicas MITRE
T1057, T1059.003, T1566.001, T1105, T1059.001, T1071.001
CVEs relacionadas
CVE-2021-27065, CVE-2021-26858, CVE-2021-26857, CVE-2021-26855
Tipo
apt
Pais origen
CN
Motivacion
Information theft and espionage
Impacto
26
Actualizado
Sat, 11 Ma

Paises objetivo (OSINT)

BelarusKyrgyzstanKazakhstanMongoliaRussian FederationTajikistanTurkmenistanUzbekistan

Sectores objetivo (OSINT)

MiningPublic AdministrationOil & GasTelecommunicationsSpace & DefenseNational Security&International Affairs