APT 18 is a threat group that has operated since at least 2009 and has targeted a range of industries, including technology, manufacturing, human rights groups, government, and medical
APT 18 is suspected to be sponsored by the Chinese government and is part of the broader APT1 group
APT 18 is known for using spearphishing, web shells, and legitimate credentials to gain access to victim networks and exfiltrate sensitive data
APT 18 is also known for using a variety of malware, such as gh0st RAT, POWBAT, and SEAWEED, to perform various malicious activities on compromised systems