H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Group

IndigoZebra

[IndigoZebra](https://attack.mitre.org/groups/G0136) is a suspected Chinese cyber espionage group that has been targeting Central Asian governments since at least 2014.(Citation: HackerNews IndigoZebra July 2021)(Citation: Checkpoint IndigoZebra July 2021)(Citation: Securelist APT Trends Q2 2017)

Group
TypeGroup
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[IndigoZebra](https://attack.mitre.org/groups/G0136) is a suspected Chinese cyber espionage group that has been targeting Central Asian governments since at least 2014.(Citation: HackerNews IndigoZebra July 2021)(Citation: Checkpoint IndigoZebra July 2021)(Citation: Securelist APT Trends Q2 2017)

10 recorded

Relationships

uses
to BoxCaon
Malware
uses
to Domains
Technique
uses
to Email Accounts
Technique
uses
to Ingress Tool Transfer
Technique
uses
to Malicious File
Technique
uses
to PoisonIvy
Malware
uses
to Spearphishing Attachment
Technique
uses
to Tool
Technique
uses
to Web Services
Technique
uses
to xCaon
Malware
5 external

References

mitre-attack
G0136
open
IndigoZebra
—
HackerNews IndigoZebra July 2021
https://thehackernews.com/2021/07/indigozebra-apt-hacking-campaign.html
open
Checkpoint IndigoZebra July 2021
https://research.checkpoint.com/2021/indigozebra-apt-continues-to-attack-central-asia-with-evolving-tools/
open
Securelist APT Trends Q2 2017
https://securelist.com/apt-trends-report-q2-2017/79332/
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance