DarkPeony

Reported Context (2)

Named in connection with an investigation of SSL certificate patterns associated with PlugX command-and-control nodes and attacker infrastructure. How SSL Certificate History Can Help Threat Hunters Map Malicious Infrastructure
Suspected Chinese cyber-espionage group associated in the article with the described infrastructure and PlugX activity. Certificate and Domain Patterns Reveal More Infrastructure Linked to Suspected DarkPeony Campaign

Malware (3)

Threat Actors (3)

Vendors (6)

Products (2)

Tools (2)

Industries (2)

Countries (8)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.