Tonto Team

Actor Type Nation State
Attributed to Nation China
Associated Threat Actor People’s Liberation Army (PLA) Unit 65017

Tonto Team is an intrusion set which has been linked to China and observed targeting military, diplomatic and infrastructure organisations in Asia and Eastern Europe.

Reporting suggests that the group has been operating since at least 2013.

Cyber Threat Graph Context

Explore how this Intrusion Set relates to the wider threat graph

References