CVE Intelligence
Início / Grupos de ameaça / APT12

APT12 G0005

🔔 Criar alerta

Também conhecido como: IXESHE, DynCalc, Numbered Panda, DNSCALC

Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK

6
CVEs associadas
5
Técnicas
3
Malwares e ferramentas

APT12 is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.

Vulnerabilidades exploradas

CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.

CVE-2012-0158 Alta · 8.8 KEV Ransomware Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
“APT12 has exploited multiple vulnerabilities for execution, including Microsoft Office vulnerabilities (CVE-2009-3129, CVE-2012-0158) and vulnerabilities in Adobe Reader and Flash (CVE-2009-4324, CVE-2009-0927, CVE-2011-0609, CVE-2011-0611).”
CVE-2011-0611 Alta · 8.8 KEV Adobe Flash Player Remote Code Execution Vulnerability
“APT12 has exploited multiple vulnerabilities for execution, including Microsoft Office vulnerabilities (CVE-2009-3129, CVE-2012-0158) and vulnerabilities in Adobe Reader and Flash (CVE-2009-4324, CVE-2009-0927, CVE-2011-0609, CVE-2011-0611).”
CVE-2011-0609 Alta · 7.8 KEV Adobe Flash Player Unspecified Vulnerability
“APT12 has exploited multiple vulnerabilities for execution, including Microsoft Office vulnerabilities (CVE-2009-3129, CVE-2012-0158) and vulnerabilities in Adobe Reader and Flash (CVE-2009-4324, CVE-2009-0927, CVE-2011-0609, CVE-2011-0611).”
CVE-2009-4324 Alta · 7.8 KEV Adobe Acrobat and Reader Use-After-Free Vulnerability
“APT12 has exploited multiple vulnerabilities for execution, including Microsoft Office vulnerabilities (CVE-2009-3129, CVE-2012-0158) and vulnerabilities in Adobe Reader and Flash (CVE-2009-4324, CVE-2009-0927, CVE-2011-0609, CVE-2011-0611).”
CVE-2009-3129 Alta · 7.8 KEV Microsoft Excel Featheader Record Memory Corruption Vulnerability
“APT12 has exploited multiple vulnerabilities for execution, including Microsoft Office vulnerabilities (CVE-2009-3129, CVE-2012-0158) and vulnerabilities in Adobe Reader and Flash (CVE-2009-4324, CVE-2009-0927, CVE-2011-0609, CVE-2011-0611).”
CVE-2009-0927 Alta · 8.8 KEV Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
“APT12 has exploited multiple vulnerabilities for execution, including Microsoft Office vulnerabilities (CVE-2009-3129, CVE-2012-0158) and vulnerabilities in Adobe Reader and Flash (CVE-2009-4324, CVE-2009-0927, CVE-2011-0609, CVE-2011-0611).”

Técnicas por tática

Acesso inicial
T1566.001 Spearphishing Attachment
Execução
T1203 Exploitation for Client ExecutionT1204.002 Malicious File
Comando e controle
T1102.002 Bidirectional CommunicationT1568.003 DNS Calculation

Malwares e ferramentas

© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.