threat actor · China
APT12
6 CVEs exploited (6 in CISA KEV) · 5 techniques · 3 software
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
The strips, in order: the CVEs it is reported to exploit by weakness class and by vendor, the techniques ATT&CK says it uses by tactic, its malware and tools, then who it targets. Each square is one record.
Open G0005 on attack.mitre.orgAPT12 is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.
Source: MITRE ATT&CK, G0005. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
- Also known as
- IXESHE, DynCalc, Numbered Panda, DNSCALC, TG-2754, BeeBus, Group 22, Calc Team, Crimson Iron, BRONZE GLOBE, Hexagon Typhoon
- Origin
- China
- Suspected sponsor
- China
- Motivation
- Espionage
- MITRE ATT&CK
- G0005
- On record in
- ATT&CK G0005 · MISP Galaxy
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.