← Back to all threat actors

APT1

Also known as Comment Crew, Comment Group, Comment Panda
Tracked as G0006

APT1 is a Chinese threat group that has been attributed to the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398.

How we source and review actor profiles
Motivation
nation-state
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Cataloged
IdentityAlias: Comment Crew

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: Comment Group

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: Comment Panda

Reviewed identity mapping approved on this date.

Cataloged
IdentityTracking identifier: G0006

Reviewed identity mapping approved on this date.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

APT1Canonical Name
Comment CrewAlias
Comment GroupAlias
Comment PandaAlias
G0006Tracking Id

Loading CVEs, techniques, indicators, malware, victims, and activity...