Chimera
Also reported as Red Charon, THORIUM, Tumbleweed Typhoon, BRONZE VAPOR, Bronze Vapor and 2 other names. Linked to China by four sources.
Reports per quarter
Techniques seen in the last two years
- T1003 1 report reports only
- T1003.001 1 report reports only
- T1003.003 1 report in ATT&CK
- T1005 1 report reports only
- T1007 1 report in ATT&CK
- T1012 1 report in ATT&CK
- T1016 1 report in ATT&CK
- T1018 1 report in ATT&CK
- T1020 1 report reports only
- T1021 1 report reports only
Show all 73 techniques Show fewer
- T1021.002 1 report in ATT&CK
- T1021.004 1 report reports only
- T1021.006 1 report in ATT&CK
- T1030 1 report reports only
- T1033 1 report in ATT&CK
- T1036 1 report reports only
- T1036.003 1 report reports only
- T1036.005 1 report in ATT&CK
- T1039 1 report in ATT&CK
- T1041 1 report in ATT&CK
- T1046 1 report in ATT&CK
- T1047 1 report in ATT&CK
- T1049 1 report in ATT&CK
- T1053 1 report reports only
- T1053.005 1 report in ATT&CK
- T1057 1 report in ATT&CK
- T1059 1 report reports only
- T1059.001 1 report in ATT&CK
- T1059.003 1 report in ATT&CK
- T1069 1 report reports only
- T1070 1 report reports only
- T1070.004 1 report in ATT&CK
- T1070.006 1 report in ATT&CK
- T1071 1 report reports only
- T1071.001 1 report in ATT&CK
- T1071.004 1 report in ATT&CK
- T1074 1 report reports only
- T1074.001 1 report in ATT&CK
- T1074.002 1 report in ATT&CK
- T1078 1 report in ATT&CK
- T1082 1 report reports only
- T1083 1 report in ATT&CK
- T1087 1 report reports only
- T1087.001 1 report in ATT&CK
- T1087.002 1 report in ATT&CK
- T1110 1 report reports only
- T1110.003 1 report in ATT&CK
- T1110.004 1 report in ATT&CK
- T1111 1 report in ATT&CK
- T1114 1 report reports only
- T1114.001 1 report in ATT&CK
- T1119 1 report in ATT&CK
- T1124 1 report in ATT&CK
- T1133 1 report in ATT&CK
- T1135 1 report in ATT&CK
- T1140 1 report reports only
- T1213 1 report reports only
- T1213.002 1 report in ATT&CK
- T1217 1 report in ATT&CK
- T1482 1 report in ATT&CK
- T1550 1 report reports only
- T1550.002 1 report in ATT&CK
- T1560 1 report reports only
- T1560.001 1 report in ATT&CK
- T1567 1 report reports only
- T1567.002 1 report in ATT&CK
- T1569 1 report reports only
- T1569.002 1 report in ATT&CK
- T1570 1 report in ATT&CK
- T1572 1 report in ATT&CK
- T1573 1 report reports only
- T1573.002 1 report reports only
- T1574 1 report reports only
Counts come from technique IDs in the actor's report text. “Reports only” means reports name the technique but MITRE ATT&CK® does not list it for this actor.
Also listed by ATT&CK
CVEs named in reports
- CVE-2021-26855 KEV ransomware
- CVE-2021-26857 KEV ransomware
- CVE-2021-27065 KEV ransomware
- CVE-2022-42475 KEV ransomware
- CVE-2022-47966 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Bankshot (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor StoneDrill (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Oblique RAT (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor METALJACK (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor elf.wellmess (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor SUNBURST (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MimiKatz (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor PowGoop (Malware Family)
-
Abusing cloud services to fly under the radar
The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor Abusing cloud services to fly under the radar
-
Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
Show all 14 reports Show fewer
-
CyCraft-Whitepaper-Chimera_V4.1.pdf
The original link failed its last check. Original publisher Detailsfor CyCraft-Whitepaper-Chimera_V4.1.pdf
-
[TLP-White]20200415 Chimera_V4.1
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor [TLP-White]20200415 Chimera_V4.1
Newest first. Details opens the report in Explore.