APT Explorer

All actors

TEMP_Heretic

Also reported as Operation EmailThief. Linked to China by three sources.

Reports
1
Last reported
Known CVEs
1
Origin
China
ID
temp-heretic
Sources
MISPETDAMalpedia
Merge evidence
2 alias matches

Reports per quarter

Dated reports, 2022 Q1 to 2022 Q1.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Operation EmailThief: Active Exploitation of Zero-day XSS Vulnerability in Zimbra

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.