Curious Gorge
Also known as UNC3742
Curious Gorge, a group TAG attributes to China's PLA SSF, has conducted campaigns against government and military organizations in Ukraine, Russia, Kazakhstan, and Mongolia. The actor has remained active against government, military, logistics and manufacturing organizations in Ukraine, Russia and Central Asia. In Russia, long running campaigns against multiple government organizations have continued, including the Ministry of Foreign Affairs. Over the past week, TAG identified additional compromises impacting multiple Russian defense contractors and manufacturers and a Russian logistics company.
Targets: Government, Military, Logistics, Defense Contractor, Ukraine, Russia, Kazakhstan, Mongolia
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
No posts or advisories have named this actor recently.
References
- https://blog.google/threat-analysis-group/tracking-cyber-activity-eastern-europe
- https://blog.google/threat-analysis-group/update-on-cyber-activity-in-eastern-europe/
- https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.