Home / Threat actors / TA459
TA459 G0062
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
1
associated CVEs
5
Techniques
4
Malware and tools
TA459 is a threat group believed to operate out of China that has targeted countries including Russia, Belarus, Mongolia, and others.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
CVE-2017-0199
High · 7.8
KEV Ransomware Microsoft Office and WordPad Remote Code Execution Vulnerability
“TA459 has exploited Microsoft Word vulnerability CVE-2017-0199 for execution.”
Techniques by tactic
Initial Access
T1566.001 Spearphishing Attachment Execution
T1059.001 PowerShellT1059.005 Visual BasicT1203 Exploitation for Client ExecutionT1204.002 Malicious File Malware and tools
- gh0st RATMalwareS0032
- NetTravelerMalwareS0033
- PlugXMalwareS0013
- ZeroTMalwareS0230
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.