Advanced persistent threat (English Wikipedia)

Gallagher, Sean (3 October 2019). "Kaspersky finds Uzbekistan hacking op… because group used Kaspersky AV". arstechnica.com. Ars Technica. Archived from the original on 22 March 2021. Retrieved 5 October 2019.

axios.com (Global: 1,716^th place; English: 973^rd place)

Sabin, Sam (26 October 2022). "New pro-China disinformation campaign targets 2022 elections: Report". Axios. Archived from the original on 26 October 2022. Retrieved 27 October 2022.
Sabin, Sam (19 November 2024). "New China-linked telco attackers". Axios. Retrieved 19 November 2024.

bleepingcomputer.com (Global: 6,171^st place; English: 4,055^th place)

Ilascu, Ionut (19 October 2021). "LightBasin hacking group breaches 13 global telecoms in two years". Bleeping Computer. Archived from the original on 24 July 2023. Retrieved 8 April 2022.
Gatlan, Sergiu. "Windows zero-day actively exploited to spy on European diplomats". BleepingComputer. Retrieved 3 November 2025.

bloomberg.com (Global: 99^th place; English: 77^th place)

"Under Cyberthreat: Defense Contractors". Bloomberg.com. BusinessWeek. 6 July 2009. Archived from the original on 11 January 2010. Retrieved 20 January 2010.

books.google.com (Global: 3^rd place; English: 3^rd place)

Gonzalez, Joaquin Jay III; Kemp, Roger L. (16 January 2019). Cybersecurity: Current Writings on Threats and Protection. McFarland. p. 69. ISBN 978-1-4766-7440-7.
RicMessier (30 October 2013). GSEC GIAC Security Essentials Certification All. McGraw Hill Professional, 2013. p. xxv. ISBN 978-0-07-182091-2.

br.de (Global: 1,260^th place; English: 6,225^th place)

web.br.de

Tanriverdi, Hakan; Zierer, Max; Wetter, Ann-Kathrin; Biermann, Kai; Nguyen, Thi Do (8 October 2020). Nierle, Verena; Schöffel, Robert; Wreschniok, Lisa (eds.). "Lined up in the sights of Vietnamese hackers". Bayerischer Rundfunk. Archived from the original on 22 March 2021. Retrieved 11 October 2020. In Bui's case the traces lead to a group presumably acting on behalf of the Vietnamese state. Experts have many names for this group: APT 32 and Ocean Lotus are best known. In conversations with a dozen of information security specialists, they all agreed that this is a Vietnamese group spying, in particular, on its own compatriots.

businessweek.com (Global: 712^th place; English: 526^th place)

"An Evolving Crisis". BusinessWeek. 10 April 2008. Archived from the original on 10 January 2010. Retrieved 20 January 2010.
"The New E-spionage Threat". BusinessWeek. 10 April 2008. Archived from the original on 18 April 2011. Retrieved 19 March 2011.

cio.com (Global: low place; English: 7,149^th place)

Olavsrud, Thor (30 April 2012). "Targeted Attacks Increased, Became More Diverse in 2011". CIO Magazine. Archived from the original on 14 April 2021. Retrieved 14 April 2021.

cisa.gov (Global: low place; English: low place)

Iranian Government-Sponsored MuddyWater Actors Conducting Malicious Cyber Operations

cisco.com (Global: 2,882^nd place; English: 2,105^th place)

"What Is an Advanced Persistent Threat (APT)?". Cisco. Archived from the original on 22 March 2021. Retrieved 11 August 2019.

crowdstrike.com (Global: low place; English: low place)

go.crowdstrike.com

"Crowdstrike Global Threat Report 2020" (PDF). crowdstrike.com. 2020. Archived (PDF) from the original on 14 March 2020. Retrieved 30 December 2020.

adversary.crowdstrike.com

"Adversary: Venomous Bear - Threat Actor". Crowdstrike Adversary Universe. Retrieved 22 March 2022.

curatedintel.org (Global: low place; English: low place)

BushidoToken (20 May 2022). "Threat Group Naming Schemes In Cyber Threat Intelligence". Curated Intelligence. Archived from the original on 8 December 2023. Retrieved 21 January 2024.

cybereason.com (Global: low place; English: low place)

Maloney, Sarah. "What is an Advanced Persistent Threat (APT)?". Archived from the original on 7 April 2019. Retrieved 9 November 2018.

cyberscoop.com (Global: low place; English: low place)

Lyngaas, Sean (10 August 2021). "Chinese hackers posed as Iranians to breach Israeli targets, FireEye says". www.cyberscoop.com. Archived from the original on 29 November 2023. Retrieved 15 August 2021.
Lyngaas, Sean (12 February 2019). "Right country, wrong group? Researchers say it wasn't APT10 that hacked Norwegian software firm". www.cyberscoop.com. Cyberscoop. Archived from the original on 7 May 2021. Retrieved 16 October 2020.
Lyngaas, Sean (16 October 2020). "Google offers details on Chinese hacking group that targeted Biden campaign". Cyberscoop. Archived from the original on 7 May 2021. Retrieved 16 October 2020.
Kapko, Matt (30 September 2025). "Palo Alto Networks spots new China espionage group showcasing advanced skills". CyberScoop. Retrieved 30 September 2025.

cyfirma.com (Global: low place; English: low place)

"APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files". CYFIRMA. Retrieved 26 November 2025.

darkreading.com (Global: low place; English: low place)

Vijayan, Jai (19 December 2019). "China-Based Cyber Espionage Group Targeting Orgs in 10 Countries". www.darkreading.com. Dark Reading. Archived from the original on 7 May 2021. Retrieved 12 January 2020.
"APT Attacks Trace To India, Researcher Says". www.darkreading.com. Retrieved 28 April 2025.

doi.org (Global: 2^nd place; English: 2^nd place)

Au, Man Ho (2018). "Privacy-preserving personal data operation on mobile cloud—Chances and challenges over advanced persistent threat". Future Generation Computer Systems. 79: 337–349. doi:10.1016/j.future.2017.06.021.

educause.edu (Global: low place; English: low place)

er.educause.edu

Ingerman, Bret; Yang, Catherine (31 May 2011). "Top-Ten IT Issues, 2011". Educause Review. Archived from the original on 14 April 2021. Retrieved 14 April 2021.

etda.or.th (Global: low place; English: low place)

apt.etda.or.th

"Rampant Kitten". Thailand Electronic Transactions Development Agency. Archived from the original on 29 November 2022. Retrieved 21 January 2024.

fireeye.com (Global: low place; English: low place)

fireeye.com

"M-Trends Cyber Security Trends". FireEye. Archived from the original on 21 September 2021. Retrieved 11 August 2019.
"Cyber Threats to the Financial Services and Insurance Industries" (PDF). FireEye. Archived from the original (PDF) on 11 August 2019.
"Cyber Threats to the Retail and Consumer Goods Industry" (PDF). FireEye. Archived from the original (PDF) on 11 August 2019.
"Anatomy of an APT (Advanced Persistent Threat) Attack". FireEye. Archived from the original on 7 November 2020. Retrieved 14 November 2020.

www2.fireeye.com

"APT17: Hiding in Plain Sight - FireEye and Microsoft Expose Obfuscation Tactic" (PDF). FireEye. May 2015. Archived (PDF) from the original on 24 November 2023. Retrieved 21 January 2024.

content.fireeye.com

"Double Dragon APT41, a dual espionage and cyber crime operation". FireEye. 16 October 2019. Archived from the original on 7 May 2021. Retrieved 14 April 2020.

forrester.com (Global: low place; English: low place)

blogs.forrester.com

"Introducing Forrester's Cyber Threat Intelligence Research". Forrester Research. Archived from the original on 15 April 2014. Retrieved 14 April 2014.

fox-it.com (Global: low place; English: low place)

resources.fox-it.com

van Dantzig, Maarten; Schamper, Erik (19 December 2019). "Wocao APT20" (PDF). fox-it.com. NCC Group. Archived from the original (PDF) on 22 March 2021. Retrieved 23 December 2019.

fraunhofer.de (Global: 7,696^th place; English: 9,995^th place)

malpedia.caad.fkie.fraunhofer.de

"The Gorgon Group (Threat Actor)". malpedia.caad.fkie.fraunhofer.de. Retrieved 26 November 2025.
"Operation C-Major (Threat Actor)". malpedia.caad.fkie.fraunhofer.de. Retrieved 26 November 2025.

gitguardian.com (Global: low place; English: low place)

blog.gitguardian.com

"What are MITRE ATT&CK initial access techniques". GitGuardian - Automated Secrets Detection. 8 June 2021. Archived from the original on 29 November 2023. Retrieved 13 October 2023.

govinfosecurity.com (Global: low place; English: low place)

Sirico, Greg (30 September 2025). "China's 'Phantom Taurus' Hacks Middle East". www.govinfosecurity.com. Retrieved 30 September 2025.

hhs.gov (Global: 5,973^rd place; English: 3,693^rd place)

"China-Based Threat Actors" (PDF). U.S. Department of Health and Human Services Office of Information Security. 16 August 2023. Archived (PDF) from the original on 29 December 2023. Retrieved 29 April 2024.

iitd.com.ua (Global: low place; English: low place)

"CrowdStrike 2023 Global Threat Report" (PDF). CrowdStrike. Archived (PDF) from the original on 26 March 2024. Retrieved 21 January 2024.

itgovernance.co.uk (Global: low place; English: low place)

"Advanced Persistent Threats (APTs)". IT Governance. Archived from the original on 11 August 2019. Retrieved 11 August 2019.

jinfowar.com (Global: low place; English: low place)

"A Context-Centred Research Approach to Phishing and Operational Technology in Industrial Control Systems | Journal of Information Warfare". www.jinfowar.com. Archived from the original on 31 July 2021. Retrieved 31 July 2021.

kaspersky.com (Global: low place; English: low place)

"What Is an Advanced Persistent Threat (APT)?". www.kaspersky.com. Archived from the original on 22 March 2021. Retrieved 11 August 2019.

lumen.com (Global: low place; English: low place)

blog.lumen.com

Labs, Black Lotus (11 August 2021). "ReverseRat Reemerges with a (Night)Fury: New Campaign and New Developments, Same Familiar Side-Actor". Lumen Blog. Retrieved 26 November 2025.

malwarebytes.com (Global: low place; English: low place)

blog.malwarebytes.com

"Explained: Advanced Persistent Threat (APT)". Malwarebytes Labs. 26 July 2016. Archived from the original on 9 May 2019. Retrieved 11 August 2019.

mandiant.com (Global: low place; English: low place)

intelreport.mandiant.com

"APT1: Exposing One of China's Cyber Espionage Units". Mandiant. 2013. Archived from the original on 2 February 2015. Retrieved 19 February 2013.

microsoft.com (Global: 153^rd place; English: 151^st place)

microsoft.com

Intelligence, Microsoft Threat (24 May 2023). "Volt Typhoon targets US critical infrastructure with living-off-the-land techniques". Microsoft Security Blog. Archived from the original on 17 January 2024. Retrieved 26 May 2023.
"Staying ahead of threat actors in the age of AI". Microsoft. 14 February 2024. Archived from the original on 16 February 2024. Retrieved 16 February 2024.
Lambert, John (18 April 2023). "Microsoft shifts to a new threat actor naming taxonomy". Microsoft. Archived from the original on 22 January 2024. Retrieved 21 January 2024.

learn.microsoft.com

"How Microsoft names threat actors". Microsoft. 16 January 2024. Archived from the original on 10 July 2024. Retrieved 21 January 2024.

blogs.microsoft.com

Burt, Tom (2 March 2021). "New nation-state cyberattacks". blogs.microsoft.com. Microsoft. Archived from the original on 2 March 2021. Retrieved 3 March 2021.

mitre.org (Global: low place; English: low place)

attack.mitre.org

"Gorgon Group, Group G0078 | MITRE ATT&CK®". attack.mitre.org. Retrieved 26 November 2025.
"Transparent Tribe, COPPER FIELDSTONE, APT36, Mythic Leopard, ProjectM, Group G0134 | MITRE ATT&CK®". attack.mitre.org. Retrieved 26 November 2025.
"SideCopy, Group G1008 | MITRE ATT&CK®". attack.mitre.org. Retrieved 26 November 2025.
"APT39, ITG07, Chafer, Remix Kitten, Group G0087 | MITRE ATT&CK®". attack.mitre.org. Archived from the original on 30 December 2022. Retrieved 30 December 2022.

nytimes.com (Global: 7^th place; English: 7^th place)

Rajagopalan, Megha (19 June 2025). "China Is Hacking Russia to Steal War Secrets". The New York Times. ISSN 0362-4331. Retrieved 20 June 2025.

openai.com (Global: 1,559^th place; English: 1,155^th place)

"Disrupting malicious uses of AI by state-affiliated threat actors". 14 February 2024. Archived from the original on 16 February 2024. Retrieved 16 February 2024.

ox.ac.uk (Global: 613^th place; English: 456^th place)

ora.ox.ac.uk

Deibert, R.; Rohozinski, R.; Manchanda, A.; Villeneuve, N.; Walton, G (28 March 2009). "Tracking GhostNet: investigating a cyber espionage network". The Munk Centre for International Studies, University of Toronto. Archived from the original on 27 December 2023. Retrieved 27 December 2023.

proquest.com (Global: 206^th place; English: 124^th place)

Beim, Jared (2018). "Enforcing a Prohibition on International Espionage". Chicago Journal of International Law. 18: 647–672. ProQuest 2012381493. Archived from the original on 22 May 2021. Retrieved 18 January 2023.

publications.gc.ca (Global: 5,675^th place; English: 3,330^th place)

McMahon, Dave; Rohozinski, Rafal. "The Dark Space Project: Defence R&D Canada – Centre for Security Science Contractor Report DRDC CSS CR 2013-007" (PDF). publications.gc.ca. Archived (PDF) from the original on 5 November 2016. Retrieved 1 April 2021.

reuters.com (Global: 49^th place; English: 47^th place)

Blanchard, Ben (19 February 2013). "China says U.S. hacking accusations lack technical proof". Reuters. Archived from the original on 14 April 2021. Retrieved 14 April 2021.

sans.edu (Global: low place; English: low place)

"Assessing Outbound Traffic to Uncover Advanced Persistent Threat" (PDF). SANS Technology Institute. Archived from the original (PDF) on 26 June 2013. Retrieved 14 April 2013.

scworld.com (Global: low place; English: low place)

Barth, Bradley (16 March 2016). "'Suckfly' in the ointment: Chinese APT group steals code-signing certificates". SC Media. Archived from the original on 24 September 2024. Retrieved 24 September 2024.

securelist.com (Global: low place; English: low place)

"Equation: The Death Star of Malware Galaxy". Kaspersky Lab. 16 February 2015. Archived from the original on 11 July 2019. Retrieved 23 July 2019.

secureworks.com (Global: low place; English: low place)

"Advanced Persistent Threats: Learn the ABCs of APTs - Part A". SecureWorks. Archived from the original on 7 April 2019. Retrieved 23 January 2017.
"Anatomy of an Advanced Persistent Threat (APT)". Dell SecureWorks. Archived from the original on 5 March 2016. Retrieved 21 May 2012.
"Outmaneuvering Advanced and Evasive Malware Threats". Secureworks. Secureworks Insights. Archived from the original on 7 April 2019. Retrieved 24 February 2016.

security.com (Global: low place; English: low place)

symantec-enterprise-blogs.security.com

"Buckeye: Espionage Outfit Used Equation Group Tools Prior to Shadow Brokers Leak". Symantec. 7 May 2019. Archived from the original on 7 May 2019. Retrieved 23 July 2019.

securityweek.com (Global: low place; English: low place)

Naraine, Ryan (2 March 2021). "Microsoft: Multiple Exchange Server Zero-Days Under Attack by Chinese Hacking Group". securityweek.com. Wired Business Media. Archived from the original on 6 July 2023. Retrieved 3 March 2021.

spiegel.de (Global: 66^th place; English: 350^th place)

Rosenbach, Marcel; Schulz, Thomas; Wagner, Wieland (19 January 2010). "Google Under Attack: The High Cost of Doing Business in China". Der Spiegel. Archived from the original on 21 January 2010. Retrieved 20 January 2010.

straitstimes.com (Global: 543^rd place; English: 346^th place)

"What is UNC3886, the group that attacked Singapore's critical information infrastructure?". The Straits Times. 18 July 2025. ISSN 0585-3923. Retrieved 19 July 2025.

symantec.com (Global: 9,107^th place; English: 6,668^th place)

"Advanced Persistent Threats: A Symantec Perspective" (PDF). Symantec. Archived from the original (PDF) on 8 May 2018.

taipeitimes.com (Global: 1,398^th place; English: 881^st place)

"Bureau names ransomware culprits". Taipei Times. 17 May 2020. Archived from the original on 22 March 2021. Retrieved 22 May 2020.

talosintelligence.com (Global: low place; English: low place)

blog.talosintelligence.com

Warren Mercer; Vitor Ventura (23 February 2021). "Gamaredon - When nation states don't pay all the bills". Cisco. Archived from the original on 19 March 2022. Retrieved 22 March 2022.
Warren Mercer; Paul Rascagneres; Vitor Ventura (29 June 2020). "PROMETHIUM extends global reach with StrongPity3 APT". Cisco. Archived from the original on 22 March 2022. Retrieved 22 March 2022.

techtarget.com (Global: 2,435^th place; English: 1,699^th place)

Nichols, Shaun (20 October 2021). "'LightBasin' hackers spent 5 years hiding on telco networks". TechTarget. Archived from the original on 29 November 2023. Retrieved 8 April 2022.

thediplomat.com (Global: 1,382^nd place; English: 876^th place)

Panda, Ankit. "Offensive Cyber Capabilities and Public Health Intelligence: Vietnam, APT32, and COVID-19". thediplomat.com. The Diplomat. Archived from the original on 22 March 2021. Retrieved 29 April 2020.

theguardian.com (Global: 12^th place; English: 11^th place)

Milmo, Dan (5 April 2024). "China will use AI to disrupt elections in the US, South Korea and India, Microsoft warns". The Guardian. ISSN 0261-3077. Archived from the original on 25 May 2024. Retrieved 7 April 2024.

thehackernews.com (Global: low place; English: low place)

News, The Hacker. "APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign". The Hacker News. Retrieved 26 November 2025. {{cite web}}: |last= has generic name (help)
Lakshmanan, Ravie. "DoNot APT Expands Operations, Targets European Foreign Ministries with LoptikMod Malware". The Hacker News. Retrieved 1 August 2025.

therecord.media (Global: low place; English: low place)

Cimpanu, Catalin (5 December 2021). "Microsoft seizes domains used by Chinese cyber-espionage group Nickel (APT15)". therecord.media. Recorded Future. Retrieved 7 October 2025.

threatpost.com (Global: low place; English: low place)

Montalbano, Elizabeth (1 September 2020). "Pioneer Kitten APT Sells Corporate Network Access". Threat Post. Archived from the original on 22 March 2021. Retrieved 3 September 2020.

tominfosec.blogspot.com (Global: low place; English: low place)

"Understanding the Advanced Persistent Threat". Tom Parker. 4 February 2010. Archived from the original on 18 February 2010. Retrieved 4 February 2010.

treasury.gov (Global: 1,996^th place; English: 1,728^th place)

home.treasury.gov

"Treasury Sanctions China-Linked Hackers for Targeting U.S. Critical Infrastructure". U.S. Department of the Treasury. 19 March 2024. Archived from the original on 25 March 2024. Retrieved 25 March 2024.

trendmicro.co.uk (Global: low place; English: low place)

"Advanced persistent Threat Awareness" (PDF). TrendMicro Inc. Archived (PDF) from the original on 10 June 2016. Retrieved 11 August 2019.

usenix.org (Global: 5,990^th place; English: 3,752^nd place)

"Advanced Persistent Threat (or Informationized Force Operations)" (PDF). Usenix, Michael K. Daly. 4 November 2009. Archived (PDF) from the original on 11 May 2021. Retrieved 4 November 2009.

venturebeat.com (Global: 616^th place; English: 430^th place)

Kyle Alspach (4 February 2022). "Microsoft discloses new details on Russian hacker group Gamaredon". VentureBeat. Archived from the original on 6 February 2022. Retrieved 22 March 2022.

war.gov (Global: low place; English: low place)

"Commander Discusses a Decade of DOD Cyber Power". U.S. DEPARTMENT OF DEFENSE. Archived from the original on 19 September 2020. Retrieved 28 August 2020.

web.archive.org (Global: 1^st place; English: 1^st place)

"What Is an Advanced Persistent Threat (APT)?". www.kaspersky.com. Archived from the original on 22 March 2021. Retrieved 11 August 2019.
"What Is an Advanced Persistent Threat (APT)?". Cisco. Archived from the original on 22 March 2021. Retrieved 11 August 2019.
Maloney, Sarah. "What is an Advanced Persistent Threat (APT)?". Archived from the original on 7 April 2019. Retrieved 9 November 2018.
"M-Trends Cyber Security Trends". FireEye. Archived from the original on 21 September 2021. Retrieved 11 August 2019.
"Cyber Threats to the Financial Services and Insurance Industries" (PDF). FireEye. Archived from the original (PDF) on 11 August 2019.
"Cyber Threats to the Retail and Consumer Goods Industry" (PDF). FireEye. Archived from the original (PDF) on 11 August 2019.
"Advanced Persistent Threats: A Symantec Perspective" (PDF). Symantec. Archived from the original (PDF) on 8 May 2018.
"Advanced Persistent Threats (APTs)". IT Governance. Archived from the original on 11 August 2019. Retrieved 11 August 2019.
"Advanced persistent Threat Awareness" (PDF). TrendMicro Inc. Archived (PDF) from the original on 10 June 2016. Retrieved 11 August 2019.
"Explained: Advanced Persistent Threat (APT)". Malwarebytes Labs. 26 July 2016. Archived from the original on 9 May 2019. Retrieved 11 August 2019.
"Assessing Outbound Traffic to Uncover Advanced Persistent Threat" (PDF). SANS Technology Institute. Archived from the original (PDF) on 26 June 2013. Retrieved 14 April 2013.
"Introducing Forrester's Cyber Threat Intelligence Research". Forrester Research. Archived from the original on 15 April 2014. Retrieved 14 April 2014.
Beim, Jared (2018). "Enforcing a Prohibition on International Espionage". Chicago Journal of International Law. 18: 647–672. ProQuest 2012381493. Archived from the original on 22 May 2021. Retrieved 18 January 2023.
"Advanced Persistent Threats: Learn the ABCs of APTs - Part A". SecureWorks. Archived from the original on 7 April 2019. Retrieved 23 January 2017.
Olavsrud, Thor (30 April 2012). "Targeted Attacks Increased, Became More Diverse in 2011". CIO Magazine. Archived from the original on 14 April 2021. Retrieved 14 April 2021.
"An Evolving Crisis". BusinessWeek. 10 April 2008. Archived from the original on 10 January 2010. Retrieved 20 January 2010.
"The New E-spionage Threat". BusinessWeek. 10 April 2008. Archived from the original on 18 April 2011. Retrieved 19 March 2011.
Rosenbach, Marcel; Schulz, Thomas; Wagner, Wieland (19 January 2010). "Google Under Attack: The High Cost of Doing Business in China". Der Spiegel. Archived from the original on 21 January 2010. Retrieved 20 January 2010.
"Commander Discusses a Decade of DOD Cyber Power". U.S. DEPARTMENT OF DEFENSE. Archived from the original on 19 September 2020. Retrieved 28 August 2020.
"Under Cyberthreat: Defense Contractors". Bloomberg.com. BusinessWeek. 6 July 2009. Archived from the original on 11 January 2010. Retrieved 20 January 2010.
"Understanding the Advanced Persistent Threat". Tom Parker. 4 February 2010. Archived from the original on 18 February 2010. Retrieved 4 February 2010.
"Advanced Persistent Threat (or Informationized Force Operations)" (PDF). Usenix, Michael K. Daly. 4 November 2009. Archived (PDF) from the original on 11 May 2021. Retrieved 4 November 2009.
"Anatomy of an Advanced Persistent Threat (APT)". Dell SecureWorks. Archived from the original on 5 March 2016. Retrieved 21 May 2012.
Ingerman, Bret; Yang, Catherine (31 May 2011). "Top-Ten IT Issues, 2011". Educause Review. Archived from the original on 14 April 2021. Retrieved 14 April 2021.
McMahon, Dave; Rohozinski, Rafal. "The Dark Space Project: Defence R&D Canada – Centre for Security Science Contractor Report DRDC CSS CR 2013-007" (PDF). publications.gc.ca. Archived (PDF) from the original on 5 November 2016. Retrieved 1 April 2021.
"Outmaneuvering Advanced and Evasive Malware Threats". Secureworks. Secureworks Insights. Archived from the original on 7 April 2019. Retrieved 24 February 2016.
"APT1: Exposing One of China's Cyber Espionage Units". Mandiant. 2013. Archived from the original on 2 February 2015. Retrieved 19 February 2013.
"What are MITRE ATT&CK initial access techniques". GitGuardian - Automated Secrets Detection. 8 June 2021. Archived from the original on 29 November 2023. Retrieved 13 October 2023.
Blanchard, Ben (19 February 2013). "China says U.S. hacking accusations lack technical proof". Reuters. Archived from the original on 14 April 2021. Retrieved 14 April 2021.
Deibert, R.; Rohozinski, R.; Manchanda, A.; Villeneuve, N.; Walton, G (28 March 2009). "Tracking GhostNet: investigating a cyber espionage network". The Munk Centre for International Studies, University of Toronto. Archived from the original on 27 December 2023. Retrieved 27 December 2023.
"Anatomy of an APT (Advanced Persistent Threat) Attack". FireEye. Archived from the original on 7 November 2020. Retrieved 14 November 2020.
"Threat Intelligence in an Active Cyber Defense (Part 1)". Recorded Future. 18 February 2015. Archived from the original on 20 June 2021. Retrieved 10 March 2021.
"Threat Intelligence in an Active Cyber Defense (Part 2)". Recorded Future. 24 February 2015. Archived from the original on 27 February 2021. Retrieved 10 March 2021.
"A Context-Centred Research Approach to Phishing and Operational Technology in Industrial Control Systems | Journal of Information Warfare". www.jinfowar.com. Archived from the original on 31 July 2021. Retrieved 31 July 2021.
"APT17: Hiding in Plain Sight - FireEye and Microsoft Expose Obfuscation Tactic" (PDF). FireEye. May 2015. Archived (PDF) from the original on 24 November 2023. Retrieved 21 January 2024.
"China-Based Threat Actors" (PDF). U.S. Department of Health and Human Services Office of Information Security. 16 August 2023. Archived (PDF) from the original on 29 December 2023. Retrieved 29 April 2024.
van Dantzig, Maarten; Schamper, Erik (19 December 2019). "Wocao APT20" (PDF). fox-it.com. NCC Group. Archived from the original (PDF) on 22 March 2021. Retrieved 23 December 2019.
Vijayan, Jai (19 December 2019). "China-Based Cyber Espionage Group Targeting Orgs in 10 Countries". www.darkreading.com. Dark Reading. Archived from the original on 7 May 2021. Retrieved 12 January 2020.
Barth, Bradley (16 March 2016). "'Suckfly' in the ointment: Chinese APT group steals code-signing certificates". SC Media. Archived from the original on 24 September 2024. Retrieved 24 September 2024.
"Building China's Comac C919 airplane involved a lot of hacking, report says". ZDNET. Archived from the original on 15 November 2019. Retrieved 24 September 2024.
Lyngaas, Sean (10 August 2021). "Chinese hackers posed as Iranians to breach Israeli targets, FireEye says". www.cyberscoop.com. Archived from the original on 29 November 2023. Retrieved 15 August 2021.
Lyngaas, Sean (12 February 2019). "Right country, wrong group? Researchers say it wasn't APT10 that hacked Norwegian software firm". www.cyberscoop.com. Cyberscoop. Archived from the original on 7 May 2021. Retrieved 16 October 2020.
Lyngaas, Sean (16 October 2020). "Google offers details on Chinese hacking group that targeted Biden campaign". Cyberscoop. Archived from the original on 7 May 2021. Retrieved 16 October 2020.
"How Microsoft names threat actors". Microsoft. 16 January 2024. Archived from the original on 10 July 2024. Retrieved 21 January 2024.
"Treasury Sanctions China-Linked Hackers for Targeting U.S. Critical Infrastructure". U.S. Department of the Treasury. 19 March 2024. Archived from the original on 25 March 2024. Retrieved 25 March 2024.
"Double Dragon APT41, a dual espionage and cyber crime operation". FireEye. 16 October 2019. Archived from the original on 7 May 2021. Retrieved 14 April 2020.
"Bureau names ransomware culprits". Taipei Times. 17 May 2020. Archived from the original on 22 March 2021. Retrieved 22 May 2020.
Greenberg, Andy (6 August 2020). "Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry". Wired. ISSN 1059-1028. Archived from the original on 22 March 2021. Retrieved 14 July 2024.
Sabin, Sam (26 October 2022). "New pro-China disinformation campaign targets 2022 elections: Report". Axios. Archived from the original on 26 October 2022. Retrieved 27 October 2022.
Milmo, Dan (5 April 2024). "China will use AI to disrupt elections in the US, South Korea and India, Microsoft warns". The Guardian. ISSN 0261-3077. Archived from the original on 25 May 2024. Retrieved 7 April 2024.
Naraine, Ryan (2 March 2021). "Microsoft: Multiple Exchange Server Zero-Days Under Attack by Chinese Hacking Group". securityweek.com. Wired Business Media. Archived from the original on 6 July 2023. Retrieved 3 March 2021.
Burt, Tom (2 March 2021). "New nation-state cyberattacks". blogs.microsoft.com. Microsoft. Archived from the original on 2 March 2021. Retrieved 3 March 2021.
Nichols, Shaun (20 October 2021). "'LightBasin' hackers spent 5 years hiding on telco networks". TechTarget. Archived from the original on 29 November 2023. Retrieved 8 April 2022.
Ilascu, Ionut (19 October 2021). "LightBasin hacking group breaches 13 global telecoms in two years". Bleeping Computer. Archived from the original on 24 July 2023. Retrieved 8 April 2022.
Cimpanu, Catalin. "Hackers target the air-gapped networks of the Taiwanese and Philippine military". ZDnet. Archived from the original on 22 March 2021. Retrieved 16 May 2020.
Intelligence, Microsoft Threat (24 May 2023). "Volt Typhoon targets US critical infrastructure with living-off-the-land techniques". Microsoft Security Blog. Archived from the original on 17 January 2024. Retrieved 26 May 2023.
Tucker, Eric (18 September 2024). "FBI disrupts Chinese cyber operation targeting critical infrastructure in the US". Associated Press. Archived from the original on 24 September 2024. Retrieved 18 September 2024.
"Disrupting malicious uses of AI by state-affiliated threat actors". 14 February 2024. Archived from the original on 16 February 2024. Retrieved 16 February 2024.
"Staying ahead of threat actors in the age of AI". Microsoft. 14 February 2024. Archived from the original on 16 February 2024. Retrieved 16 February 2024.
Krouse, Sarah; Volz, Dustin; Viswanatha, Aruna; McMillan, Robert (5 October 2024). "U.S. Wiretap Systems Targeted in China-Linked Hack". The Wall Street Journal. Archived from the original on 5 October 2024. Retrieved 5 October 2024.
Yamaguchi, Mari (8 January 2025). "Japan links Chinese hacker MirrorFace to dozens of cyberattacks targeting security and tech data". Associated Press. Archived from the original on 8 January 2025. Retrieved 8 January 2025.
Montalbano, Elizabeth (1 September 2020). "Pioneer Kitten APT Sells Corporate Network Access". Threat Post. Archived from the original on 22 March 2021. Retrieved 3 September 2020.
"APT39, ITG07, Chafer, Remix Kitten, Group G0087 | MITRE ATT&CK®". attack.mitre.org. Archived from the original on 30 December 2022. Retrieved 30 December 2022.
"Crowdstrike Global Threat Report 2020" (PDF). crowdstrike.com. 2020. Archived (PDF) from the original on 14 March 2020. Retrieved 30 December 2020.
Kyle Alspach (4 February 2022). "Microsoft discloses new details on Russian hacker group Gamaredon". VentureBeat. Archived from the original on 6 February 2022. Retrieved 22 March 2022.
Charlie Osborne (21 March 2022). "Ukraine warns of InvisiMole attacks tied to state-sponsored Russian hackers". ZDNet. Archived from the original on 22 March 2022. Retrieved 22 March 2022.
Warren Mercer; Vitor Ventura (23 February 2021). "Gamaredon - When nation states don't pay all the bills". Cisco. Archived from the original on 19 March 2022. Retrieved 22 March 2022.
Warren Mercer; Paul Rascagneres; Vitor Ventura (29 June 2020). "PROMETHIUM extends global reach with StrongPity3 APT". Cisco. Archived from the original on 22 March 2022. Retrieved 22 March 2022.
"Equation: The Death Star of Malware Galaxy". Kaspersky Lab. 16 February 2015. Archived from the original on 11 July 2019. Retrieved 23 July 2019.
Gallagher, Sean (3 October 2019). "Kaspersky finds Uzbekistan hacking op… because group used Kaspersky AV". arstechnica.com. Ars Technica. Archived from the original on 22 March 2021. Retrieved 5 October 2019.
Panda, Ankit. "Offensive Cyber Capabilities and Public Health Intelligence: Vietnam, APT32, and COVID-19". thediplomat.com. The Diplomat. Archived from the original on 22 March 2021. Retrieved 29 April 2020.
Tanriverdi, Hakan; Zierer, Max; Wetter, Ann-Kathrin; Biermann, Kai; Nguyen, Thi Do (8 October 2020). Nierle, Verena; Schöffel, Robert; Wreschniok, Lisa (eds.). "Lined up in the sights of Vietnamese hackers". Bayerischer Rundfunk. Archived from the original on 22 March 2021. Retrieved 11 October 2020. In Bui's case the traces lead to a group presumably acting on behalf of the Vietnamese state. Experts have many names for this group: APT 32 and Ocean Lotus are best known. In conversations with a dozen of information security specialists, they all agreed that this is a Vietnamese group spying, in particular, on its own compatriots.
BushidoToken (20 May 2022). "Threat Group Naming Schemes In Cyber Threat Intelligence". Curated Intelligence. Archived from the original on 8 December 2023. Retrieved 21 January 2024.
"CrowdStrike 2023 Global Threat Report" (PDF). CrowdStrike. Archived (PDF) from the original on 26 March 2024. Retrieved 21 January 2024.
"Rampant Kitten". Thailand Electronic Transactions Development Agency. Archived from the original on 29 November 2022. Retrieved 21 January 2024.
Lambert, John (18 April 2023). "Microsoft shifts to a new threat actor naming taxonomy". Microsoft. Archived from the original on 22 January 2024. Retrieved 21 January 2024.

wired.com (Global: 193^rd place; English: 152^nd place)

Greenberg, Andy (6 August 2020). "Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry". Wired. ISSN 1059-1028. Archived from the original on 22 March 2021. Retrieved 14 July 2024.

worldcat.org (Global: 5^th place; English: 5^th place)

search.worldcat.org

Cole., Eric (2013). Advanced Persistent Threat: Understanding the Danger and How to Protect Your Organization. Syngress. OCLC 939843912.
Greenberg, Andy (6 August 2020). "Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry". Wired. ISSN 1059-1028. Archived from the original on 22 March 2021. Retrieved 14 July 2024.
Milmo, Dan (5 April 2024). "China will use AI to disrupt elections in the US, South Korea and India, Microsoft warns". The Guardian. ISSN 0261-3077. Archived from the original on 25 May 2024. Retrieved 7 April 2024.
Rajagopalan, Megha (19 June 2025). "China Is Hacking Russia to Steal War Secrets". The New York Times. ISSN 0362-4331. Retrieved 20 June 2025.
"What is UNC3886, the group that attacked Singapore's critical information infrastructure?". The Straits Times. 18 July 2025. ISSN 0585-3923. Retrieved 19 July 2025.

wsj.com (Global: 79^th place; English: 65^th place)

Krouse, Sarah; McMillan, Robert; Volz, Dustin (25 September 2024). "China-Linked Hackers Breach U.S. Internet Providers in New 'Salt Typhoon' Cyberattack". The Wall Street Journal. Archived from the original on 7 October 2024. Retrieved 25 September 2024.
Krouse, Sarah; Volz, Dustin; Viswanatha, Aruna; McMillan, Robert (5 October 2024). "U.S. Wiretap Systems Targeted in China-Linked Hack". The Wall Street Journal. Archived from the original on 5 October 2024. Retrieved 5 October 2024.

zdnet.com (Global: 786^th place; English: 558^th place)

"Building China's Comac C919 airplane involved a lot of hacking, report says". ZDNET. Archived from the original on 15 November 2019. Retrieved 24 September 2024.
Cimpanu, Catalin. "Hackers target the air-gapped networks of the Taiwanese and Philippine military". ZDnet. Archived from the original on 22 March 2021. Retrieved 16 May 2020.
Charlie Osborne (21 March 2022). "Ukraine warns of InvisiMole attacks tied to state-sponsored Russian hackers". ZDNet. Archived from the original on 22 March 2022. Retrieved 22 March 2022.

Advanced persistent threat (English Wikipedia)

apnews.com (Global: 129th place; English: 89th place)

archive.today (Global: 14th place; English: 14th place)

arstechnica.com (Global: 388th place; English: 265th place)

axios.com (Global: 1,716th place; English: 973rd place)

bleepingcomputer.com (Global: 6,171st place; English: 4,055th place)

bloomberg.com (Global: 99th place; English: 77th place)

books.google.com (Global: 3rd place; English: 3rd place)

br.de (Global: 1,260th place; English: 6,225th place)

web.br.de

businessweek.com (Global: 712th place; English: 526th place)

cio.com (Global: low place; English: 7,149th place)

cisa.gov (Global: low place; English: low place)

cisco.com (Global: 2,882nd place; English: 2,105th place)

crowdstrike.com (Global: low place; English: low place)

go.crowdstrike.com

adversary.crowdstrike.com

curatedintel.org (Global: low place; English: low place)

cybereason.com (Global: low place; English: low place)

cyberscoop.com (Global: low place; English: low place)

cyfirma.com (Global: low place; English: low place)

darkreading.com (Global: low place; English: low place)

doi.org (Global: 2nd place; English: 2nd place)

educause.edu (Global: low place; English: low place)

er.educause.edu

etda.or.th (Global: low place; English: low place)

apt.etda.or.th

fireeye.com (Global: low place; English: low place)

fireeye.com

www2.fireeye.com

content.fireeye.com

forrester.com (Global: low place; English: low place)

blogs.forrester.com

fox-it.com (Global: low place; English: low place)

resources.fox-it.com

fraunhofer.de (Global: 7,696th place; English: 9,995th place)

malpedia.caad.fkie.fraunhofer.de

gitguardian.com (Global: low place; English: low place)

blog.gitguardian.com

govinfosecurity.com (Global: low place; English: low place)

hhs.gov (Global: 5,973rd place; English: 3,693rd place)

iitd.com.ua (Global: low place; English: low place)

itgovernance.co.uk (Global: low place; English: low place)

jinfowar.com (Global: low place; English: low place)

kaspersky.com (Global: low place; English: low place)

lumen.com (Global: low place; English: low place)

blog.lumen.com

malwarebytes.com (Global: low place; English: low place)

blog.malwarebytes.com

mandiant.com (Global: low place; English: low place)

intelreport.mandiant.com

microsoft.com (Global: 153rd place; English: 151st place)

microsoft.com

learn.microsoft.com

blogs.microsoft.com

mitre.org (Global: low place; English: low place)

attack.mitre.org

nytimes.com (Global: 7th place; English: 7th place)

openai.com (Global: 1,559th place; English: 1,155th place)

ox.ac.uk (Global: 613th place; English: 456th place)

ora.ox.ac.uk

proquest.com (Global: 206th place; English: 124th place)

publications.gc.ca (Global: 5,675th place; English: 3,330th place)

reuters.com (Global: 49th place; English: 47th place)

sans.edu (Global: low place; English: low place)

scworld.com (Global: low place; English: low place)

securelist.com (Global: low place; English: low place)

secureworks.com (Global: low place; English: low place)

security.com (Global: low place; English: low place)

symantec-enterprise-blogs.security.com

securityweek.com (Global: low place; English: low place)

spiegel.de (Global: 66th place; English: 350th place)

straitstimes.com (Global: 543rd place; English: 346th place)

symantec.com (Global: 9,107th place; English: 6,668th place)

taipeitimes.com (Global: 1,398th place; English: 881st place)

talosintelligence.com (Global: low place; English: low place)

blog.talosintelligence.com

techtarget.com (Global: 2,435th place; English: 1,699th place)

thediplomat.com (Global: 1,382nd place; English: 876th place)

theguardian.com (Global: 12th place; English: 11th place)

apnews.com (Global: 129^th place; English: 89^th place)

archive.today (Global: 14^th place; English: 14^th place)

arstechnica.com (Global: 388^th place; English: 265^th place)

axios.com (Global: 1,716^th place; English: 973^rd place)

bleepingcomputer.com (Global: 6,171^st place; English: 4,055^th place)

bloomberg.com (Global: 99^th place; English: 77^th place)

books.google.com (Global: 3^rd place; English: 3^rd place)

br.de (Global: 1,260^th place; English: 6,225^th place)

businessweek.com (Global: 712^th place; English: 526^th place)

cio.com (Global: low place; English: 7,149^th place)

cisco.com (Global: 2,882^nd place; English: 2,105^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

fraunhofer.de (Global: 7,696^th place; English: 9,995^th place)

hhs.gov (Global: 5,973^rd place; English: 3,693^rd place)

microsoft.com (Global: 153^rd place; English: 151^st place)

nytimes.com (Global: 7^th place; English: 7^th place)

openai.com (Global: 1,559^th place; English: 1,155^th place)

ox.ac.uk (Global: 613^th place; English: 456^th place)

proquest.com (Global: 206^th place; English: 124^th place)

publications.gc.ca (Global: 5,675^th place; English: 3,330^th place)

reuters.com (Global: 49^th place; English: 47^th place)

spiegel.de (Global: 66^th place; English: 350^th place)

straitstimes.com (Global: 543^rd place; English: 346^th place)

symantec.com (Global: 9,107^th place; English: 6,668^th place)

taipeitimes.com (Global: 1,398^th place; English: 881^st place)

techtarget.com (Global: 2,435^th place; English: 1,699^th place)

thediplomat.com (Global: 1,382^nd place; English: 876^th place)

theguardian.com (Global: 12^th place; English: 11^th place)

treasury.gov (Global: 1,996^th place; English: 1,728^th place)

usenix.org (Global: 5,990^th place; English: 3,752^nd place)

venturebeat.com (Global: 616^th place; English: 430^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

wired.com (Global: 193^rd place; English: 152^nd place)

worldcat.org (Global: 5^th place; English: 5^th place)

wsj.com (Global: 79^th place; English: 65^th place)

zdnet.com (Global: 786^th place; English: 558^th place)