Threat actor
APT 3
Attribution profile
- Type
- Nation State
- Location
- China
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2016-09-01
- Last seen
- 2016-09-01
- Updated
- 2026-10-12 05:48
- Aliases
- 3 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
APT 3, also known as Gothic Panda, Buckeye, and UPS Team, is a China-based cyber espionage group. It has been observed targeting government entities in Hong Kong, using spear‑phishing emails that contain malicious links and malware‑laden attachments to gain initial access. The group’s activities are politically motivated and attributed to Chinese state‑sponsored actors, with the 2016 intrusion of Hong Kong government agencies preceding legislative elections serving as a representative campaign aimed at espionage.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.