Safe is an advanced persistent threat group first observed in 2013, assessed with high confidence to be aligned with China. The group's primary motivation is information theft and espionage, targeting high-value industries globally. Safe distinguishes itself through stealthy operations and complex attack methodologies, employing both custom-built malware and readily available open-source tools. The group's name is derived from its malicious files, reflecting a characteristic element of its operational approach. While sometimes mentioned alongside groups like APT28, Lazarus Group, and Turla in broader discussions, Safe maintains distinct operational patterns.

Aliases del actor

"Energy technology""G20""NGOs""Dissident Groups"SIG39Malicious TeamViewer versionsJAVA RATsMoonlight_Mazeestá vinculado a actividades de ciberataquesStuxnetTa505SectorJ04GOLD TAHOEDridexotrosCarbanakCarbon SpiderG0008Odinaffaunque no se han identificado sistemas específicos afectadossugieren una actividad maliciosaaunque no haya sido confirmada públicamentedatos sensiblesCobraDerusbiHIGHNOONRbdoor o P2P BackdoorPandaDragonBRONZETaurusTyphoon

Actores similares

LUNAR SPIDERapt · 0BOSS SPIDERapt · 0SCATTERED SPIDERapt · 0INDRIK SPIDERapt · 0MALLARD SPIDERapt · 0MUMMY SPIDERapt · 0SMOKY SPIDERapt · 0SALTY SPIDERapt · 0WIZARD SPIDERapt · 0CIRCUS SPIDERapt · 0