← Back to all campaigns
ActiveMITRE ATT&CK

FunnyDream

FunnyDream was a suspected Chinese cyber espionage campaign that targeted government and foreign organizations in Malaysia, the Philippines, Taiwan, Vietnam, and other parts of Southeast Asia. Security researchers linked the FunnyDream campaign to possible Chinese-speaking threat actors through the use of the Chinoxy backdoor and noted infrastructure overlap with the TAG-16 threat group.

First observedJul 1, 2018
Last observedNov 1, 2020
Attributed actors0
Source-backed events2
Attribution

Who has been linked to this activity

Each relationship retains its own confidence and source.

No actor attribution is currently available.
Activity

Campaign timeline

Every date says what it measures so catalog dates are not confused with publication dates.

Last observed
Campaign

FunnyDream last observed

The campaign source marks this as the latest known activity date.

MITRE ATT&CKSource
First observed
Campaign

FunnyDream first observed

The campaign source marks this as the beginning of the known activity window.

MITRE ATT&CKSource
About the context below

CVEs, techniques, malware, and indicators in the sections below are associated with an attributed actor. They are useful investigative context, but the campaign source does not necessarily link every item directly to this campaign.

Investigation context

What the attributed actors are known to use

Use this material to guide hunting and prioritization, then confirm each relationship against its cited source.

Related vulnerabilities 0

No linked CVEs are available.

ATT&CK techniques 0

No linked techniques are available.

Malware and tools 0

No linked malware or tools are available.

Indicators 0

No source-linked indicators are available.

Sources

Evidence behind this page

Open the original material before making an attribution or response decision.