G00133 cited sources

APT30

Techniques Mapped2

Tools & Malware5

Campaigns TrackedNone published

Last Updated (MITRE)Jul 31, 2026

Description (MITRE ATT&CK)

APT30 is a threat group suspected to be associated with the Chinese government. While Naikon shares some characteristics with APT30, the two groups do not appear to be exact matches.

Known Techniques by Tactic

Initial Access (1)

T1566.001 Spearphishing Attachment

Execution (1)

T1204.002 Malicious File

Associated Tools & Malware

SHIPSHAPE (malware)BACKSPACE (malware)FLASHFLOOD (malware)NETEAGLE (malware)SPACESHIP (malware)

Sectors Mentioned

Government

Derived from MITRE ATT&CK's own description text for this group — not a confirmed, exhaustive targeting assessment.

Seraph Context

Organisational Relevance

Shown when this actor's known techniques match your monitored environment.

Exploited CVE Correlation

Surfaced when a technique used by this actor maps to a tracked CISA KEV entry.

Sector & Regional Signal

Derived from MITRE's own published description text, never asserted beyond it.

Watchlist

Signed-in customers can track this actor and be notified of profile updates.

Is this actor relevant to your environment?

Match this actor's known techniques against the technologies you run inside Seraph CTI, and get notified if their profile changes.

Explore Seraph CTI Back to Threat Actors