Home / Threat actors / APT1
APT1 G0006
Also known as: Comment Crew, Comment Group, Comment Panda
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
23
Techniques
17
Malware and tools
APT1 is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1583.001 DomainsT1584.001 DomainsT1585.002 Email AccountsT1588.001 MalwareT1588.002 Tool Initial Access
T1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link Execution
T1059.003 Windows Command Shell Stealth
T1036.005 Match Legitimate Resource Name or Location Credential Access
T1003.001 LSASS Memory Discovery
T1007 System Service DiscoveryT1016 System Network Configuration DiscoveryT1049 System Network Connections DiscoveryT1057 Process DiscoveryT1087.001 Local AccountT1135 Network Share Discovery Lateral Movement
T1021.001 Remote Desktop ProtocolT1550.002 Pass the Hash Collection
T1005 Data from Local SystemT1114.001 Local Email CollectionT1114.002 Remote Email CollectionT1119 Automated CollectionT1560.001 Archive via Utility Malware and tools
- BISCUITMalwareS0017
- CALENDARMalwareS0025
- GLOOXMAILMalwareS0026
- PoisonIvyMalwareS0012
- SeasaltMalwareS0345
- WEBC2MalwareS0109
- CachedumpToolS0119
- gsecdumpToolS0008
- ipconfigToolS0100
- LslsassToolS0121
- MimikatzToolS0002
- NetToolS0039
- Pass-The-Hash ToolkitToolS0122
- PsExecToolS0029
- pwdumpToolS0006
- TasklistToolS0057
- xCmdToolS0123
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.