APT Explorer

All actors

IronHusky

Also reported as BBCY-TA1. Linked to China by three sources.

Reports
6
Last reported
Known CVEs
5
Origin
China
ID
ironhusky
Sources
MISPETDAMalpedia
Merge evidence
2 alias matches

Reports per quarter

Dated reports, 2019 Q4 to 2025 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. MysterySnail attacks with Windows zero-day _ Securelist

    file creation date ORKL

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  3. MysterySnail attacks with Windows zero-day

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  4. MysterySnail attacks with Windows zero-day

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. APT trends report Q2 2020

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. mobile-malware-report.pdf

    file creation date ORKL

    The original link failed its last check. Original publisher Details

Newest first. Details opens the report in Explore.