APT 10 is another China-based threat group that has been linked to the Chinese Ministry of State Security
APT 10 has been active since at least 2009 and has targeted a wide range of sectors, including aerospace, construction, engineering, finance, health care, insurance, mining, and telecommunications
APT 10’s main objective is to steal sensitive data, such as intellectual property, trade secrets, and personal information, from its victims
APT 10 uses various techniques to compromise networks, such as spear-phishing, web shells, malware, and credential theft
Some of the malware associated with APT 10 are CHINACHOPPER, EVILNUGGET, MURKYTOP, ORANGEADE, POISONIVY, and REDLEAVES
APT 10 is considered to be one of the most prolific and persistent threat actors in the cyber domain. It has demonstrated a high level of operational sophistication and adaptability
It has also shown an ability to evade detection and attribution by using proxy servers, encryption, and obfuscation