POISON CARP is a cyber espionage group that first emerged around November 2018, known for its persistent targeting of entities primarily related to Tibetan and Uyghur ethnic minority groups. This group operates with advanced persistent threat capabilities and is strongly assessed with high confidence to be sponsored by the Chinese state. POISON CARP's primary motivation is information theft and surveillance, focusing on intelligence collection. A defining characteristic of the group is its early adoption of one-click mobile exploits against Tibetan groups, alongside extensive social engineering tactics to gain initial access. The group is also tracked under several aliases, including Earth Empusa, Evil Eye, and Red Dev 16.

Aliases del actor

Earth EmpusaEvil EyeRed Dev 16ActionSpyScanBoxBeEFThis threat actorAPT TIBET

Actores similares

APT-C-36threat-actor · 1APT-C-23threat-actor · 0WeRedEvilsapt · 0apt-earthberberokaactor · 1apt-earthhundunactor · 1apt-earthwendigoactor · 1apt-greyenergyactor · 1apt-newsbeefactor · 1apt-poisonneedlesactor · 1apt-redbaldknightactor · 1