APT10
Attribution profile
- Type
- Nation State
- Location
- China
- Known incidents
- 13 incidents
- Sources
- 0 sources
- First seen
- 2006-01-01
- Last seen
- 2018-12-20
- Updated
- 2026-10-13 01:57
- Aliases
- 3 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
APT10, also known as Stone Pounce and MenuPass, is a Chinese state‑linked threat actor publicly associated with the Ministry of State Security. The group conducts cyber espionage aimed at advancing Chinese economic interests by stealing corporate and government secrets. Its typical targets are technology service providers and the clients of those providers, which it accesses through compromises of cloud computing infrastructures. Observed tactics include exploiting cloud service vulnerabilities to gain initial access, maintaining persistent presence within victim networks, and exfiltrating sensitive data. Notable publicly reported operations include the Cloud Hopper campaign disclosed in 2018 and a prolonged, multi‑year espionage effort that affected numerous IT service providers and their downstream organizations worldwide. No specific malware families or tooling details are referenced in the available source material.
Incidents
Attributed incidents are available to members.
13 incidentsSources
Sources available to members: 0 sources.