MITRE ATT&CK / Groups / G0073

APT19

ID
G0073
Associated names
Codoso, C0d0so0, Codoso Team, Sunshop Group
Source
attack.mitre.org
MITRE last modified
1 Aug 2026

APT19 is a Chinese-based threat group that has targeted a variety of industries, including defense, finance, energy, pharmaceutical, telecommunications, high tech, education, manufacturing, and legal services. In 2017, a phishing campaign was used to target seven law and investment firms. [1] Some analysts track APT19 and Deep Panda as the same group, but it is unclear from open source information if the groups are the same. [2] [3] [4]

Techniques used (21)

Software used (2)

References

  1. FireEye APT19
  2. ICIT China's Espionage Jul 2016
  3. FireEye APT Groups
  4. Unit 42 C0d0so0 Jan 2016