APT27 is a threat actor attributed to CN, also known as TEMP.Hippo, GreedyTaotie, Earth Smilodon. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does APT27 exploit?

APT27 is known to exploit 12 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

APT27

Also known as: TEMP.Hippo, GreedyTaotie, Earth Smilodon, Linen Typhoon, IODINE, Emissary Panda, ATK 15, EMISSARY PANDA, Iron Taurus, Group 35, ZipToken, Circle Typhoon, LuckyMouse, Budworm, Hippo, Iron Tiger, G0027, UNC215, Bronze Union, APT 27, APT27, Wekby2, TG-3390, BRONZE UNION, Lucky Mouse, BOWSER, Red Phoenix

CNInformation theft and espionage

Exploited CVEs

Overview

A China-based actor that targets foreign embassies to collect data on government, defence, and technology sectors.

Exploited Vulnerabilities

CVE ID	Action
CVE-2019-3610	View Details