LongNosedGoblin

Linked to China by two sources.

Reports: 3
Last reported: 5 May 2026
Known CVEs: 1
Origin: China

ID: longnosedgoblin
Sources: MISP Malpedia
Merge evidence: 1 alias match

Reports per quarter

2025 Q4: 2 reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2025 Q4 to 2026 Q2.

Techniques seen in the last two years

T1027.013 1 report
T1027.015 1 report
T1036.005 1 report
T1053.005 1 report
T1055 1 report
T1056.001 1 report
T1059.001 1 report
T1059.003 1 report
T1071.001 1 report
T1074.001 1 report

Show all 29 techniques Show fewer

T1082 1 report
T1083 1 report
T1102.002 1 report
T1105 1 report
T1106 1 report
T1125 1 report
T1217 1 report
T1218 1 report
T1480 1 report
T1560 1 report
T1564.003 1 report
T1567.002 1 report
T1573.001 1 report
T1573.002 1 report
T1574.014 1 report
T1585.003 1 report
T1588.001 1 report
T1620 1 report
T1622 1 report

Counts come from technique IDs in the actor's report text.

CVEs named in reports

CVE-2025-0994 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

5 May 2026

UAT-8302 and its box full of malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UAT-8302 and its box full of malware
19 December 2025

Chinese APT LongNosedGoblin Targets Government Networks in Southeast Asia and Japan

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Chinese APT LongNosedGoblin Targets Government Networks in Southeast Asia and Japan
18 December 2025

LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan

publisher's date ESET Research fromORKLESET

Archived copy on ORKL Detailsfor LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan

Newest first. Details opens the report in Explore.