threatintel
actor tracker
IOC pivot
ioc · name

AIRBREAK

CN · ChinaAPT40confidence · high

AIRBREAK (a.k.a. Orz) JavaScript-based backdoor enumerated in the malware-family list of CISA AA21-200A as part of APT40's toolkit. Cross-referenced to MITRE S0229.

family
AIRBREAK
first seen
Jul 18, 2021
publisher
CISA
source citation