CVE Intelligence
Início / Grupos de ameaça / Naikon

Naikon G0019

🔔 Criar alerta

Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK

0
CVEs associadas
21
Técnicas
15
Malwares e ferramentas

Naikon is assessed to be a state-sponsored cyber espionage group attributed to the Chinese People’s Liberation Army’s (PLA) Chengdu Military Region Second Technical Reconnaissance Bureau (Military Unit Cover Designator 78020). Active since at least 2010, Naikon has primarily conducted operations against government, military, and civil organizations in Southeast Asia, as well as against international bodies such as the United Nations Development Programme (UNDP) and the Association of Southeast Asian Nations (ASEAN).

While Naikon shares some characteristics with APT30, the two groups do not appear to be exact matches.

Vulnerabilidades exploradas

CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.

O ATT&CK não cita CVEs para este grupo.

Técnicas por tática

Acesso inicial
T1078.002 Domain AccountsT1566.001 Spearphishing Attachment
Execução
T1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1204.002 Malicious FileT1574.001 DLL
Persistência
T1053.005 Scheduled TaskT1078.002 Domain AccountsT1137.006 Add-insT1547.001 Registry Run Keys / Startup Folder
Escalada de privilégios
T1053.005 Scheduled TaskT1078.002 Domain AccountsT1547.001 Registry Run Keys / Startup Folder
Furtividade
T1036.004 Masquerade Task or ServiceT1036.005 Match Legitimate Resource Name or LocationT1078.002 Domain AccountsT1574.001 DLL
Descoberta
T1016 System Network Configuration DiscoveryT1018 Remote System DiscoveryT1046 Network Service DiscoveryT1518.001 Security Software Discovery

Malwares e ferramentas

© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.