SHORE CASTLE

Reported Context (7)

Listed among China-aligned actors represented in observed APT campaigns. CYFIRMA Report Finds Sustained Cyber Threats Across Government and Civic Organizations
Listed among suspected China-aligned actors in observed sector campaigns. CYFIRMA Report Finds Rising Ransomware and APT Activity Targeting Real Estate and Construction
Suspected China-linked actor represented in observed education campaigns. CYFIRMA Report Highlights Elevated Cyber Risks Facing the Education Sector
China-nexus threat actor identified as one of the groups exploiting SharePoint zero-days in July 2025; also known as Emissary Panda, Bronze Union, and Linen Typhoon. Warlock Ransomware Targets Spanish- and Portuguese-Speaking Organizations
Previously used name mapped to the new name SHORE CASTLE. Google Threat Intelligence Group Introduces Unified Threat Actor Naming System

CVE (4)

Malware (25)

People (4)

Threat Actors (110)

MITRE ATT&CK (16)

Vendors (12)

Products (20)

Tools (18)

Industries (34)

Countries (60)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.