H3XA — Operational Evidence

TypeGroup

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[TA459](https://attack.mitre.org/groups/G0062) is a threat group believed to operate out of China that has targeted countries including Russia, Belarus, Mongolia, and others. (Citation: Proofpoint TA459 April 2017)

9 recorded

Relationships

uses

to Exploitation for Client Execution

Technique

uses

to gh0st RAT

Malware

uses

to Malicious File

Technique

uses

to NetTraveler

Malware

uses

to PlugX

Malware

uses

to PowerShell

Technique

uses

to Spearphishing Attachment

Technique

uses

to Visual Basic

Technique

uses

to ZeroT

Malware

3 external

References

mitre-attack

G0062

open

TA459

—

Proofpoint TA459 April 2017

https://www.proofpoint.com/us/threat-insight/post/apt-targets-financial-analysts

open