[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fp2TmyQ-Y5_J-CZxEP_CRU4O-EUJPTeUj85ePth56Yr8":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":25,"country":26,"suspected_sponsor":27,"target_industries":28,"target_countries":32,"incident_types":38,"references":40,"techniques":54,"technique_count":160,"created_at":161,"seoMetadata":162,"schemaOrg":166},"APT32","apt32",[9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24],"OceanLotus Group","Ocean Lotus","OceanLotus","Cobalt Kitty","APT-C-00","SeaLotus","Sea Lotus","APT-32","APT 32","Ocean Buffalo","POND LOACH","TIN WOODLAWN","BISMUTH","ATK17","G0050","Canvas Cyclone","Cyber espionage actors, now designated by FireEye as APT32 (OceanLotus Group), are carrying out intrusions into private sector companies across multiple industries and have also targeted foreign governments, dissidents, and journalists. FireEye assesses that APT32 leverages a unique suite of fully-featured malware, in conjunction with commercially-available tools, to conduct targeted operations that are aligned with Vietnamese state interests.","VN","Vietnam",[29,30,31],"Government","Private sector","Civil society",[33,34,35,27,36,37],"China","Germany","United States","Philippines","Association of Southeast Asian Nations",[39],"Espionage",[41,42,43,44,45,46,47,48,49,50,51,52,53],"https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0050\u002F","https:\u002F\u002Fwww.fireeye.com\u002Fblog\u002Fthreat-research\u002F2017\u002F05\u002Fcyber-espionage-apt32.html","https:\u002F\u002Fwww.cybereason.com\u002Flabs-operation-cobalt-kitty-a-large-scale-apt-in-asia-carried-out-by-the-oceanlotus-group\u002F","https:\u002F\u002Fwww.scmagazineuk.com\u002Focean-lotus-groupapt-32-identified-as-vietnamese-apt-group\u002Farticle\u002F663565\u002F","https:\u002F\u002Fwww.brighttalk.com\u002Fwebcast\u002F10703\u002F261205","https:\u002F\u002Fgithub.com\u002Feset\u002Fmalware-research\u002Ftree\u002Fmaster\u002Foceanlotus","https:\u002F\u002Fwww.cfr.org\u002Finteractive\u002Fcyber-operations\u002Focean-lotus","https:\u002F\u002Fwww.accenture.com\u002Fus-en\u002Fblogs\u002Fblogs-pond-loach-delivers-badcake-malware","https:\u002F\u002Fwww.secureworks.com\u002Fresearch\u002Fthreat-profiles\u002Ftin-woodlawn","https:\u002F\u002Fwww.volexity.com\u002Fblog\u002F2020\u002F11\u002F06\u002Foceanlotus-extending-cyber-espionage-operations-through-fake-websites\u002F","https:\u002F\u002Fwww.trendmicro.com\u002Fen_us\u002Fresearch\u002F20\u002Fk\u002Fnew-macos-backdoor-connected-to-oceanlotus-surfaces.html","https:\u002F\u002Fwww.microsoft.com\u002Fsecurity\u002Fblog\u002F2020\u002F11\u002F30\u002Fthreat-actor-leverages-coin-miner-techniques-to-stay-under-the-radar-heres-how-to-spot-them","https:\u002F\u002Fabout.fb.com\u002Fnews\u002F2020\u002F12\u002Ftaking-action-against-hackers-in-bangladesh-and-vietnam",[55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159],"T1564.004","T1574","T1588","T1087","T1087.001","T1583","T1583.001","T1583.006","T1071","T1071.001","T1071.003","T1560","T1547","T1547.001","T1059","T1059.001","T1059.003","T1059.005","T1059.007","T1543","T1543.003","T1189","T1585","T1585.001","T1048","T1048.003","T1041","T1203","T1068","T1083","T1222","T1222.002","T1589","T1589.002","T1564","T1564.001","T1564.003","T1070","T1070.004","T1070.006","T1105","T1056","T1056.001","T1570","T1036","T1036.003","T1036.004","T1036.005","T1112","T1046","T1135","T1571","T1027","T1027.001","T1027.010","T1027.011","T1027.013","T1588.002","T1137","T1003","T1003.001","T1566","T1566.001","T1566.002","T1598","T1598.003","T1055","T1012","T1021","T1021.002","T1018","T1053","T1053.005","T1505","T1505.003","T1072","T1608","T1608.001","T1608.004","T1218","T1218.005","T1218.010","T1218.011","T1082","T1016","T1049","T1033","T1216","T1216.001","T1569","T1569.002","T1552","T1552.002","T1550","T1550.002","T1550.003","T1204","T1204.001","T1204.002","T1078","T1078.003","T1102","T1047","T1574.001","T1685.005",105,"2023-08-09T17:25:09.409843+00:00",{"title":163,"metaDescription":164,"keywords":165},"APT32 Threat Actor Profile | Precursor Intelligence","Cyber espionage actors, now designated by FireEye as APT32 (OceanLotus Group), are carrying out intrusions into private sector companies across multip...","APT32, OceanLotus Group, Ocean Lotus, OceanLotus, Cobalt Kitty, APT-C-00, SeaLotus, Sea Lotus, APT-32, APT 32, Ocean Buffalo, POND LOACH, TIN WOODLAWN, BISMUTH, ATK17, G0050, Canvas Cyclone, threat actor, APT, cyber threat, threat intelligence, Government, Private sector, Civil society, Vietnam, VN",{"@context":167,"@type":168,"name":6,"alternateName":169,"description":25,"url":170,"mainEntityOfPage":171,"location":173},"https:\u002F\u002Fschema.org","Organization",[9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fapt32",{"@type":172,"@id":170},"WebPage",{"@type":174,"name":26},"Country"]