Threat actor
APT24
Tracked by CyberSIXT since 21 Nov 2025
- Articles · all time
- 3
- Articles · last 30 days
- 0
- CVEs exploited · attributed
- 0
- Research reports · all time
- 0
Three articles so far, 21 Nov 2025 to 24 Nov 2025.
- APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ DomainsThe Hacker News
- BadAudio malware: how APT24 scaled its cyberespionage through supply chain attacksSecurity Affairs
- China’s APT24 Launches Stealth BADAUDIO Malware, Hitting 1,000+ Domains via Taiwanese Supply Chain HackSecurityOnline
Names and sources
- APT24
- Named by CyberSIXT coverage
- G0011
- Named by MITRE ATT&CK
- China’s APT24 Launches Stealth BADAUDIO Malware, Hitting 1,000+ Domains via Taiwanese Supply Chain HackSecurityOnline
- BadAudio malware: how APT24 scaled its cyberespionage through supply chain attacksSecurity Affairs
- APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ DomainsThe Hacker News · first in our coverage