Apt24 — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
9
occurrences
First Seen
November 20, 2025
Last Seen
December 24, 2025

Related Threat Clusters

  • APT24 Expands Cyberespionage with BadAudio Malware via Supply Chain Attacks

    APT24, a China-linked cyberespionage group, has been deploying the BadAudio malware through supply chain attacks over a three-year period. The Google Threat Intelligence Group reports that APT24 has shifted tactics from…

    2 articles · Updated November 22, 2025
  • APT24 Uses BadAudio Malware in Ongoing Espionage Campaign

    APT24, a China-linked hacking group, has been utilizing a previously undocumented malware named BadAudio in a three-year espionage campaign. This malware has been delivered through various methods, including…

    6 articles · Updated November 20, 2025
  • Evasive Panda APT Conducts Cyber Espionage Campaign in Asia

    Evasive Panda, an advanced persistent threat group, has been conducting a targeted cyberespionage campaign in Asia for two years. The group utilizes adversary-in-the-middle (AitM) and DNS poisoning techniques to…

    1 article · Updated December 24, 2025
  • APT24 Cyberespionage Campaign Utilizes BadAudio Malware Over Three Years

    The APT24 threat group, linked to China, has been conducting a cyberespionage campaign utilizing a newly discovered malware called BadAudio. This campaign has targeted over 20 legitimate public websites to deliver the…

    4 articles · Updated November 21, 2025
  • Fortinet Zero-Day Exploited in the Wild Amid Ongoing Cyber Threats

    A suspected zero-day vulnerability in Fortinet products has been exploited in the wild, affecting users and organizations relying on these systems. The vulnerability is part of a broader trend of increasing cyber…

    4 articles · Updated November 16, 2025
  • APT24 Utilizes BadAudio Malware for Cyberespionage

    APT24 has been identified using BadAudio malware to enhance its cyberespionage capabilities through supply chain attacks. This malware targets various sectors, potentially affecting organizations that rely on…

    8 articles · Updated November 23, 2025

Recent Intelligence Reports

  • Evasive Panda APT Targets Asia with Advanced Cyber Espionage — Technadu · December 24, 2025
  • Security Affairs newsletter Round 551 by Pierluigi Paganini — Securityaffairs · November 23, 2025
  • Security Affairs newsletter Round 551 by Pierluigi Paganini — Securityaffairs.Co · November 23, 2025
  • BadAudio malware: how APT24 scaled its cyberespionage through supply chain attacks — Securityaffairs.Co · November 22, 2025
  • Chinese APT24 Cyberespionage Campaign Targets Taiwan with BADAUDIO Malware — Technadu · November 21, 2025
  • Novel BadAudio malware leveraged in years-long APT24 campaign — Scworld · November 21, 2025
  • APT24 Deploys New BadAudio Malware, Hijacks Legitimate Public Sites to Launch Attacks — Gbhackers · November 21, 2025
  • Google exposes BadAudio malware used in APT24 espionage campaigns — Bleepingcomputer · November 20, 2025

CVSS v3.1 Breakdown