Uptime Hamster: 106d 1h 48mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza IXESHE

IXESHE

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: APT12, BRONZE GLOBE, BeeBus, Calc Team, Crimson Iron, DNSCalc, DynCalc, Group 22, Hexagon Typhoon, NUMBERED PANDA, TG-2754, Numbered Panda, TG-2754 reflejan su conexión con actividades de espionaje, ciberespionaje, apt-c-12, apt12, bluemushroom, dnscalc
Ver en IntelTracker → APTTrail →
IXESHE, also known by aliases such as APT12, Numbered Panda, and Hexagon Typhoon, is a cyber espionage group believed to be linked to the Chinese People's Liberation Army. The group has been actively operating since at least July 2009, targeting media outlets, high-technology companies, and governments, particularly in East Asia. Their primary motivation is cyber espionage in service of China's strategic objectives, including intelligence collection from governments and military entities, and the suppression of media reporting critical of the Chinese Communist Party leadership. A defining characteristic of IXESHE is its demonstrated ability to rapidly retool its entire malware infrastructure in direct response to public disclosures, earning them the moniker 'Darwin's Favorite APT Group'.

Aliases del actor

APT12BRONZE GLOBEBeeBusCalc TeamCrimson IronDNSCalcDynCalcGroup 22Hexagon TyphoonNUMBERED PANDATG-2754Numbered PandaTG-2754 reflejan su conexión con actividades de espionajeciberespionajeapt-c-12apt12bluemushroomdnscalcdyncalcixeshe

Actores similares

apt-sharppandaactor · 1apt-twistedpandaactor · 1APT27 (Emissary Panda)actor · 1Stone Pandaapt · 0Vicious Pandaapt · 0Pitty Pandaapt · 0Hurricane Pandaapt · 0Pirate Pandaapt · 0Anchor Pandaapt · 0Twisted Pandaapt · 0
Motivacion
Information theft and espionage
Malware asociado
Ursnif, win.etumbot, win.rapid_stealer, Ursnif, Ursnif, Ursnif
Tecnicas MITRE
T1078, T1573, T1127, T1204.002, T1486, T1003
CVEs relacionadas
CVE-2023-38831, CVE-2023-36884, CVE-2022-47966, CVE-2022-42475, CVE-2021-33764, CVE-2020-1472
Tipo
apt
Pais origen
CN
Motivacion
Information theft and espionage
Impacto
56
Actualizado
Wed, 01 Ju

Paises objetivo (OSINT)

GermanyJapanTaiwan, Province of ChinaUnited States

Sectores objetivo (OSINT)

ManufacturingInformation ServicesOtherPublic AdministrationElectrical&Electronical ManufacturingElectrical Equipment, Appliance, and Component ManufacturingPublishing ServicesTelecommunicationsOther Information ServicesSpace & Defense