Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

BlackTech

1 incidentes 1 paises 0 sectores threat-actor CN Ultimo: 2026-05-25

Aliases: Palmerworm, Phantom of Routers, G0098, PLEAD, Shrouded Crossbow, Waterbear, APT BLACKTECH

Ver en IntelTracker → APTTrail →

BlackTech is a suspected Chinese cyber espionage group that has primarily targeted organizations in East Asia--particularly Taiwan, Japan, and Hong Kong--and the US since at least 2013. BlackTech has used a combination of custom malware, dual-use tools, and living off the land tactics to compromise media, construction, engineering, electronics, and financial company networks.

Aliases del actor

Palmerworm Phantom of Routers G0098 PLEAD Shrouded Crossbow Waterbear APT BLACKTECH

Actores similares

apt-blacktechactor · 1 apt-c-01actor · 2 apt-c-27actor · 2 apt-45actor · 2 apt-c-37actor · 1 apt-c-23actor · 1 hellsing-aptactor · 1 apt-c-44actor · 1 apt-c-38actor · 1 apt-c-12actor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
DLS / leak site	unknown	app.validin.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	blog.jpcert.or.jp	APT BLACKTECH indicators and references
DLS / leak site	unknown	dmpdump.github.io	APT BLACKTECH indicators and references
DLS / leak site	unknown	insight-jp.nttsecurity.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	otx.alienvault.com	APT BLACKTECH indicators and references
X/Twitter	unknown	twitter.com	APT BLACKTECH indicators and references
X/Twitter	unknown	twitter.com	APT BLACKTECH indicators and references
X/Twitter	unknown	twitter.com	APT BLACKTECH indicators and references
X/Twitter	unknown	twitter.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	unit42.paloaltonetworks.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
Repositorio	unknown	github.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	raw.githubusercontent.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	www.virustotal.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	app.validin.com	APT BLACKTECH indicators and references
DLS / leak site	unknown	blog.jpcert.or.jp	APT BLACKTECH indicators and references
X/Twitter	unknown	otx.alienvault.com	APT BLACKTECH indicators and references
Web	unknown	attack.mitre.org	OSINT

Motivacion

Information theft and espionage

Malware asociado

Kivars, win.selfmake, TSCookie, win.spider_rat, elf.bifrost, win.bluether

Tecnicas MITRE

T1486, T1189, T1204.002, T1543.003 - Windows Service, T1574, T1583 - Acquire Infrastructure

Victimas

TTPs unicas

Info robada historica

N/D

Rescates reclamados

N/D

Pagos detectados

N/D

Paises afectados

China (1)

Paises objetivo (OSINT)

China

Hong Kong

JapanTaiwan, Province of China

United States

Sectores objetivo (OSINT)

ConstructionManufacturingInformation ServicesFinanceProfessional&Technical ServicesHealthCare & Social AssistancePublic AdministrationElectrical&Electronical ManufacturingPublishing ServicesTelecommunications