BlackTech — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
January 4, 2026
Last Seen
April 12, 2026

BlackTech is a apt_group tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed January 4, 2026; most recent activity April 12, 2026.

Overview

BlackTech is a Chinese-speaking APT group known for long-running espionage campaigns targeting government, technology, and critical infrastructure sectors in East Asia. It operates within the broader Chinese-state-sponsored threat landscape, employing persistent intrusion techniques and custom tooling to maintain access. The group's activities are significant due to regionally focused operations, potential political and economic impact, and its role in ongoing cyber-espionage campaigns.

Related Threat Clusters

Recent Intelligence Reports

  • How The 2022 Qatar World Cup Soccer Was Nearly Hacked — www.darkreading.com · April 12, 2026
  • China launched 2.63 million daily cyberattacks against Taiwan in 2025: NSB — Focustaiwan.Tw · January 4, 2026

CVSS v3.1 Breakdown