Cataloged
IdentityTracking identifier: G0045
Reviewed identity mapping approved on this date.
menuPass
Also known as Cicada, POTASSIUM, Stone Panda, APT10, Red Apollo, CVNX, HOGFISH, BRONZE RIVERSIDE
Tracked as
G0045
menuPass is a threat group that has been active since at least 2006. Individual members of menuPass are known to have acted in association with the Chinese Ministry of State Security's (MSS) Tianjin State Security Bureau and worked for the Huaying Haitai Science and Technology Development Company. menuPass has targeted healthcare, defense, aerospace, finance, maritime, biotechnology, energy, and government sectors globally, with an emphasis on Japanese organizations. In 2016 and 2017, the group is known to have targeted managed IT service providers (MSPs), manufacturing and mining companies, and a university.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Cataloged
IdentityAlias: Cicada
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: POTASSIUM
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Stone Panda
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: APT10
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: Red Apollo
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: CVNX
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: HOGFISH
Reviewed identity mapping approved on this date.
Cataloged
IdentityAlias: BRONZE RIVERSIDE
Reviewed identity mapping approved on this date.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
menuPassCanonical Name
APT10Alias
BRONZE RIVERSIDEAlias
CVNXAlias
CicadaAlias
HOGFISHAlias
POTASSIUMAlias
Red ApolloAlias
Stone PandaAlias
G0045Tracking Id
Loading CVEs, techniques, indicators, malware, victims, and activity...