Automation · API / MCP 中文

Group profile · G1028

APT-C-23

APT-C-23 is a threat group that has been active since at least 2014. APT-C-23 has primarily focused its operations on the Middle East, including Israeli military assets. APT-C-23 has developed mobile spyware targeting Android and iOS devices since 2017.

ATT&CK G1028 Confidence High · 100 Source src_mitre_attck_enterprise Status active

APT-C-23 is a threat group that has been active since at least 2014.1 APT-C-23 has primarily focused its operations on the Middle East, including Israeli military assets. APT-C-23 has developed mobile spyware targeting Android and iOS devices since 2017.2

  1. symantec_mantis
  2. welivesecurity_apt-c-23

Claims and citations

Every claim comes from a writer; provenance is the writer's assertion, not a review verdict from this directory. Validity reads by citation year.

predicateobjectValidConf.Evidence
also_known_asAPT-C-23— → …100src_mitre_attck_enterprise
also_known_asMantis— → …100src_mitre_attck_enterprise
also_known_asArid Viper— → …100src_mitre_attck_enterprise
also_known_asDesert Falcon— → …100src_mitre_attck_enterprise
also_known_asTAG-63— → …100src_mitre_attck_enterprise
also_known_asGrey Karkadann— → …100src_mitre_attck_enterprise
also_known_asBig Bang APT— → …100src_mitre_attck_enterprise
also_known_asTwo-tailed Scorpion— → …100src_mitre_attck_enterprise
also_known_as双尾熊— → …60src_0e0b2199-b766-47ad-af5a-891db001f83e

Technique use

No technique use yet; ATT&CK sync fills it by citation year.

Aliases

APT-C-23 · Arid Viper · Big Bang APT · Desert Falcon · Grey Karkadann · Mantis · TAG-63 · Two-tailed Scorpion · 双尾熊

Reading and review

Records are auto-ingested and not human-reviewed. Confidence is the writer's 0–100 value; bands split at ≥80 / 50–79 / <50 into high / medium / low. The four trust axes (synthetic, lifecycle, band, source count) stay separate and never merge into one score.

Corrections