<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>APT 1 Archives &#8902; CyberHood Sentinel</title>
	<atom:link href="https://hoodguy.net/tag/apt-1/feed/" rel="self" type="application/rss+xml" />
	<link>https://hoodguy.net/tag/apt-1/</link>
	<description>Guarding the Digital Frontier</description>
	<lastBuildDate>Sun, 13 Nov 2022 00:10:09 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0.7</generator>

<image>
	<url>https://hoodguy.net/wp-content/uploads/2024/05/cropped-DALL·E-2024-05-31-00.53.01-A-single-logo-for-Hoodguy-website-featuring-an-image-of-a-hacker-with-a-hoodie-and-the-tagline-We-Write.-The-logo-should-be-serious-in-style-highl-32x32.webp</url>
	<title>APT 1 Archives &#8902; CyberHood Sentinel</title>
	<link>https://hoodguy.net/tag/apt-1/</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>APT 1 &#038; its IOC&#8217;s</title>
		<link>https://hoodguy.net/apt-1-its-iocs/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=apt-1-its-iocs</link>
					<comments>https://hoodguy.net/apt-1-its-iocs/#respond</comments>
		
		<dc:creator><![CDATA[TeamHood]]></dc:creator>
		<pubDate>Sun, 13 Nov 2022 00:10:08 +0000</pubDate>
				<category><![CDATA[Threat Intelligence]]></category>
		<category><![CDATA[APT 1]]></category>
		<category><![CDATA[Chinese Hackers]]></category>
		<category><![CDATA[Hashes]]></category>
		<category><![CDATA[IOC]]></category>
		<guid isPermaLink="false">https://hoodguy.net/?p=880</guid>

					<description><![CDATA[<p>APT 1 is a Chinese attacker group as per mandiant it is &#8220;China’s Computer Network Operations Tasking to PLA Unit 61398 &#8220; Associated Groups Comment CrewComment GroupComment Panda Command and Control Web url of APT 1 Be advised that the below web url are malicious in nature hgcurtain.comcultivr.comtensins.netdecipherment.netkonamidata.comcbssrayli.comwindowsupdote.netctaböe.orggamemuster.comkyroceras.netnestlere.comraylitoday.comrenewgis.comsiseau.combmwauto.orgt008.netvssigma.comhfmforum.comchecalla.comunina2.netanyoffice.infoit-bar.netjjdesk.comsatelliteclub.infospace-today.infosst1.infostream-media.netadomhn.compsactel.comeldaedu.usna,codat.comptkstore.comgraceland-siu.orgxafsl5.orgfeilglobe.comcreativezh.comanfoundation.usrwchateau.com Hashes 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 IP Address 158.69.131.78172.81.132.6227.102.112.179211.104.160.196</p>
<p>The post <a href="https://hoodguy.net/apt-1-its-iocs/">APT 1 &#038; its IOC&#8217;s</a> appeared first on <a href="https://hoodguy.net">CyberHood Sentinel</a>.</p>
]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">APT 1 is a Chinese attacker group as per mandiant it is &#8220;China’s Computer Network Operations Tasking to PLA Unit 61398 &#8220;</p>



<p class="wp-block-paragraph"><strong>Associated Groups</strong></p>



<p class="has-text-align-left wp-block-paragraph">Comment Crew<br>Comment Group<br>Comment Panda</p>



<p class="wp-block-paragraph"><strong>Command and Control Web url of APT 1</strong></p>



<p class="wp-block-paragraph">Be advised that the below web url are malicious in nature </p>



<p class="wp-block-paragraph">hgcurtain.com<br>cultivr.com<br>tensins.net<br>decipherment.net<br>konamidata.com<br>cbssrayli.com<br>windowsupdote.net<br>ctaböe.org<br>gamemuster.com<br>kyroceras.net<br>nestlere.com<br>raylitoday.com<br>renewgis.com<br>siseau.com<br>bmwauto.org<br>t008.net<br>vssigma.com<br>hfmforum.com<br>checalla.com<br>unina2.net<br>anyoffice.info<br>it-bar.net<br>jjdesk.com<br>satelliteclub.info<br>space-today.info<br>sst1.info<br>stream-media.net<br>adomhn.com<br>psactel.com<br>eldaedu.us<br>na,codat.com<br>ptkstore.com<br>graceland-siu.org<br>xafsl5.org<br>feilglobe.com<br>creativezh.com<br>anfoundation.us<br>rwchateau.com</p>



<p class="wp-block-paragraph"><strong>Hashes</strong></p>



<p class="wp-block-paragraph">4c50457c35e2033b3a03fcbb4adac7b7<br>38a2a6782e1af29ca8cb691cf0d29a0d<br>08c7b5501df060ccfc3aa5c8c41b452f<br>fc121db04067cffbed04d7403c1d222d376fa7ba<br>832d5e6ebd9808279ee3e59ba4b5b0e884b859a5<br>be4fbb5a4b32db20a914cad5701f5c7ba51571b7<br>1f70715e86a2fcc1437926ecfaeadc53ddce41c9<br>dd3fb2750da3e8fc889cd1611117b02d49cf17f7<br>583879cfaf735fa446be5bfcbcc9e580bf542c8c<br>ec9a9d431fd69e23a5b770bf03fe0fb5a21c0c36<br>d72bc671583801c3c65ac1a96bb75c6026e06a73<br>e5c6229825f11d5a5749d3f2fe7acbe074cba77c<br>9fe4bfdd258ecedb676b9de4e23b86b1695c4e1e<br>281a13ecb674de42f2e8fdaea5e6f46a5436c685<br>42192bb852d696d55da25b9178536de6365f0e68<br>12a9faa96ba1be8a73e73be72ef1072096d964fb<br>0ae167204c841bdfd3600dddf2c9c185b17ac6d4</p>



<p class="wp-block-paragraph"><strong>IP Address</strong></p>



<p class="wp-block-paragraph">158.69.131.78<br>172.81.132.62<br>27.102.112.179<br>211.104.160.196</p>



<p class="wp-block-paragraph"> </p>
<p>The post <a href="https://hoodguy.net/apt-1-its-iocs/">APT 1 &#038; its IOC&#8217;s</a> appeared first on <a href="https://hoodguy.net">CyberHood Sentinel</a>.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://hoodguy.net/apt-1-its-iocs/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
