APT-C-12

Reports per quarter

CVEs named in reports

• CVE-2010-3333 KEV
• CVE-2012-0158 KEV ransomware
• CVE-2012-0422
• CVE-2012-4792 KEV
• CVE-2013-3906 KEV
• CVE-2014-1761 KEV
• CVE-2014-4114 KEV
• CVE-2014-6352 KEV
• CVE-2015-0097
• CVE-2015-1641 KEV
• CVE-2017-11882 KEV ransomware
• CVE-2017-12824

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 10 February 2020

   Suspected Sapphire Mushroom (APT-C-12) malicious LNK files

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Suspected Sapphire Mushroom (APT-C-12) malicious LNK files

2. 10 February 2020

   Suspected Sapphire Mushroom (APT-C-12) malicious LNK files

   date in the CCS '25 data Bit of Hex Blog fromCCS '25 data

   The original link failed its last check. Detailsfor Suspected Sapphire Mushroom (APT-C-12) malicious LNK files

3. 12 February 2019

   2018 APT Summary Report CN version

   file creation date fromORKL

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 2018 APT Summary Report CN version

4. 4 August 2016

   摩诃草组织

   file creation date fromORKL

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 摩诃草组织

5. 19 January 2016

   2015年中国高持续性威胁（APT）研究报告

   file creation date fromORKL

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 2015年中国高持续性威胁（APT）研究报告

Newest first. Details opens the report in Explore.