H3XA — Operational Evidence

TypeGroup

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[APT12](https://attack.mitre.org/groups/G0005) is a threat group that has been attributed to China. The group has targeted a variety of victims including but not limited to media outlets, high-tech companies, and multiple governments.(Citation: Meyers Numbered Panda)

8 recorded

Relationships

uses

to Bidirectional Communication

Technique

uses

to DNS Calculation

Technique

uses

to Exploitation for Client Execution

Technique

uses

Tool

uses

Malware

uses

to Malicious File

Technique

uses

Malware

uses

to Spearphishing Attachment

Technique

8 external

References

mitre-attack

G0005

APT12

—

IXESHE

—

DynCalc

—

Numbered Panda

—

DNSCALC

—

Meyers Numbered Panda

http://www.crowdstrike.com/blog/whois-numbered-panda/

Moran 2014

https://www.fireeye.com/blog/threat-research/2014/09/darwins-favorite-apt-group-2.html