Confucius
Also reported as Confucius APT. Linked to India by one source.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2011-1255
- CVE-2012-0158 KEV ransomware
- CVE-2013-0640 KEV
- CVE-2013-3893 KEV
- CVE-2014-1776 KEV
- CVE-2014-4113 KEV
- CVE-2014-6332 KEV
- CVE-2015-1641 KEV
- CVE-2015-1701 KEV ransomware
- CVE-2015-2545 KEV
- CVE-2015-5119 KEV
- CVE-2015-8651 KEV
Show all 41 CVEs Show fewer
- CVE-2016-0147
- CVE-2016-0189 KEV ransomware
- CVE-2016-0984 KEV
- CVE-2016-1010 KEV
- CVE-2016-4117 KEV ransomware
- CVE-2016-4171 KEV
- CVE-2017-0199 KEV ransomware
- CVE-2017-11882 KEV ransomware
- CVE-2017-12824
- CVE-2017-5689 KEV
- CVE-2017-8570 KEV
- CVE-2017-8750
- CVE-2017-8759 KEV
- CVE-2018-0798 KEV
- CVE-2018-0802 KEV ransomware
- CVE-2018-8373 KEV
- CVE-2018-8453 KEV ransomware
- CVE-2018-8611 KEV
- CVE-2019-6225
- CVE-2020-9049
- CVE-2021-30860 KEV
- CVE-2022-2294 KEV ransomware
- CVE-2022-26766
- CVE-2022-30190 KEV ransomware
- CVE-2024-28000
- CVE-2024-30051 KEV ransomware
- CVE-2024-32896 KEV
- CVE-2024-44000
- CVE-2024-45195 KEV
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
-
Confucius Update: New Techniques, More Patchwork Links
The original link failed its last check. Original publisher Detailsfor Confucius Update: New Techniques, More Patchwork Links
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Chrysaor (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Ave Maria (Malware Family)
-
Deciphering Confucius’ Cyberespionage Operations
The original link failed its last check. Original publisher Detailsfor Deciphering Confucius’ Cyberespionage Operations
Show all 49 reports Show fewer
-
Novel Confucius APT Android Spyware Linked to India-Pakistan Conflict
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Novel Confucius APT Android Spyware Linked to India-Pakistan Conflict
-
Chinese Influence Operations A Machiavellian Moment
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Chinese Influence Operations A Machiavellian Moment
-
Confucius Uses Pegasus Spyware-related Lures to Target Pakistani Military
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Confucius Uses Pegasus Spyware-related Lures to Target Pakistani Military
-
Confucius Uses Pegasus Spyware-related Lures to Target Pakistani Military
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Confucius Uses Pegasus Spyware-related Lures to Target Pakistani Military
-
WARZONE RAT – Beware Of The Trojan Malware Stealing Data Triggering From Various Office Documents
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor WARZONE RAT – Beware Of The Trojan Malware Stealing Data Triggering From Various Office Documents
-
Confucius APT Android Spyware Targets Pakistani and Other South Asian Regions — Cyble
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Confucius APT Android Spyware Targets Pakistani and Other South Asian Regions — Cyble
-
cybleinc.com-Confucius APT Android Spyware Targets Pakistani and Other South Asian Regions
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor cybleinc.com-Confucius APT Android Spyware Targets Pakistani and Other South Asian Regions
-
Lookout Discovers Novel Confucius APT Android Spyware Linked to India-Pakistan Conflict
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Lookout Discovers Novel Confucius APT Android Spyware Linked to India-Pakistan Conflict
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor blog.lookout.com-Lookout Discovers Novel Confucius APT Android Spyware Linked to India-Pakistan Conflict
-
Confucius APT deploys Warzone RAT
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Confucius APT deploys Warzone RAT
-
Rewterz Threat Alert – Common Raven – IOCs
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Rewterz Threat Alert – Common Raven – IOCs
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor report-spark-bahamut
-
69da886eecc7087e9dac2d3ea4c66ba8
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 69da886eecc7087e9dac2d3ea4c66ba8
-
The original link failed its last check. Original publisher Detailsfor mobile-malware-report.pdf
-
Threat Group Cards: A Threat Actor Encyclopedia
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
-
Threat Group Cards: A Threat Actor Encyclopedia
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Analysis Of Targeted Attack Against Pakistan By Exploiting InPage Vulnerability And Related APT Groups
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor EN_version
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor CN_version
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Confucius Update: New Tools and Techniques, Further Connections with Patchwork - TrendLabs Security Intelligence Blog
-
The Urpage Connection to Bahamut, Confucius and Patchwork
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The Urpage Connection to Bahamut, Confucius and Patchwork
-
The Urpage Connection to Bahamut, Confucius and Patchwork
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The Urpage Connection to Bahamut, Confucius and Patchwork
-
Bahamut, Confucius and Patchwork Connected to Urpage
The original link failed its last check. Original publisher Detailsfor Bahamut, Confucius and Patchwork Connected to Urpage
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor deciphering-confucius
-
Confucius Says...Malware Families Get Further By Abusing Legitimate Websites
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Confucius Says...Malware Families Get Further By Abusing Legitimate Websites
-
Confucius Says…Malware Families Get Further By Abusing Legitimate Websites
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Confucius Says…Malware Families Get Further By Abusing Legitimate Websites
Newest first. Details opens the report in Explore.