Leviathan
| Actor Type | Nation State |
|---|---|
| Attributed to Nation | China |
| Directly Linked Intrusion Sets | APT40 |
| Associated Threat Actor | Hainan Xiandun Technology Development Company , Hainan State Security Department , Chinese Ministry of State Security |
| Associated MITRE ATT&CK Group | Leviathan (G0065) |
Leviathan is a cyber espionage actor originally identified by researchers at Proofpoint who report the actor as being active since at least 2014. According to the original reporting, the group targets defense contractors, universities, legal organizations and govenment agencies, with a focus on the US, Western Europe and the South China Sea.
Subsequent reporting has linked the group to APT40 and the People's Republic of China's Ministry of State Security.
Cyber Threat Graph Context
Explore how this Intrusion Set relates to the wider threat graph