Threat Intelligence / Actor / GriefLure Cluster (China-nexus, unattributed)

GriefLure Cluster (China-nexus, unattributed)

Nation: China · 1 tracked threat(s) · Categories: APT

Also known as: Operation GriefLure, GriefLure Cluster

Tracked threats

Operation GriefLure — China-Nexus APT Spear-Phishing Targeting Viettel (Vietnam Military Telecom) and St. Luke's Medical Center (Philippines) with ftp.exe LotL Loader and Time-Based Polymorphic Payload Assembly — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence