APT Explorer

All actors

Xiaoqiying

Also reported as Genesis Day and Teng Snake. Linked to China by two sources.

Reports
4
Last reported
Known CVEs
6
Origin
China
ID
xiaoqiying
Sources
MISPMalpedia
Merge evidence
3 alias matches

Reports per quarter

Dated reports, 2022 Q3 to 2024 Q1.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Bringing Access Back — Initial Access Brokers Exploit F5 BIG-IP (CVE-2023-46747) and ScreenConnect

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. Bringing Access Back — Initial Access Brokers Exploit F5 BIG-IP (CVE-2023-46747) and ScreenConnect

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. 变脸, Teng Snake (a.k.a. Code Core)

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  4. 变脸, Teng Snake (a.k.a. Code Core)

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.