APT Explorer

All actors

Houndstooth Typhoon

Also reported as HASSIUM, DRAGNET PANDA, isoon and deepclif. Linked to China by three sources.

Reports
13
Last reported
Known CVEs
5
Origin
China
ID
houndstooth-typhoon
Sources
MISPMalpediaMicrosoft
Merge evidence
10 alias matches

Reports per quarter

Dated reports, 2024 Q1 to 2026 Q2.

Techniques seen in the last two years

Show all 33 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Earth Lusca Uses Geopolitical Lure to Target Taiwan Before Elections

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. UK Blames China for 2021 Hack Targeting Millions of Voters' Data

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Unmasking I-Soon | The Leak That Revealed China's Cyber Operations

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. Operation Digital Eye | Chinese APT Compromises Critical Digital Infrastructure via Visual Studio Code Tunnels

    date ORKL added it ORKL

    Archived copy on ORKL Details

  5. BlackCat Climbs the Summit With a New Tactic

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. Operation FishMedley targeting governments, NGOs, and think tanks

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. i-soon-data-leaks-jp

    date ORKL added it ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  8. i-soon-data-leaks-en

    date ORKL added it ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  9. Earth Lusca Uses Geopolitical Lure to Target Taiwan Before Elections | Trend Micro (US)

    file creation date ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  10. Uncovering an undetected KeyPlug implant attacking industries in Italy - Yoroi

    Malpedia library date ORKL

    The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Details

Show all 13 reports Show fewer

  1. ESET APT Activity Report Q2 2023-Q3 2023: Government espionage and unpatched vulnerabilities

    file creation date ORKL

    Archived copy on ORKL Details

  2. Attributing i-SOON: Private Contractor Linked to Multiple Chinese State-sponsored Groups

    file creation date ORKL

    Archived copy on ORKL Details

  3. Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.