APT3
State-sponsored cyber threat groupTrackedPending verification
Also known as: Gothic Panda, Pirpi, UPS Team, Buckeye, Threat Group-0110, TG-0110
CyberCHN
Fact cardConfidence · Source
System
TypeState-sponsored cyber threat group
Alternative designationsGothic Panda, Pirpi, UPS Team, Buckeye, Threat Group-0110, TG-0110
ProliferationOrigin country only
Capabilities
Malware and toolsLaZagne, OSInfo, PlugX, RemoteCMD, schtasks, SHOTPUT6 malware and tool entries linked in ATT&CKHigh[1]
Attribution and activity
TargetsAs of June 2015, the group appears to have shifted from targeting primarily US victims to primarily political organizations in Hong Kong.Med[1]
Notes
APT3 is a China-based threat group that researchers have attributed to China's Ministry of State Security. This group is responsible for the campaigns known as Operation Clandestine Fox, Operation Clandestine Wolf, and Operation Double Tap. As of June 2015, the group appears to have shifted from targeting primarily US victims to primarily political organizations in Hong Kong. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.
APT3 is a China-based threat group that researchers have attributed to China's Ministry of State Security. This group is responsible for the campaigns known as Operation Clandestine Fox, Operation Clandestine Wolf, and Operation Double Tap.
Draft entry. Values come from the cited public sources and are awaiting editor verification.
- APT3, Group G0022, MITRE ATT&CK
Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08
- 2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G0022)