APT40 is a threat actor attributed to CN, also known as APT40, GADOLINIUM, ATK29. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does APT40 exploit?

APT40 is known to exploit 5 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

APT40

Also known as: APT40, GADOLINIUM, ATK29, ISLANDDREAMS, Leviathan, Gingham Typhoon, MUDCARP, Red Ladon, BRONZE MOHAWK, KRYPTONITE PANDA, Gadolinium, TEMP.Periscope, G0065, TEMP.Jumper, ITG09, TA423, Kryptonite Panda

Exploited CVEs

Overview

Leviathan is an espionage actor targeting organizations and high-value targets in defense and government. Active since at least 2014, this actor has long-standing interest in maritime industries, naval defense contractors, and associated research institutions in the United States and Western Europe.

Exploited Vulnerabilities

CVE ID	Action
CVE-2017-11882	View Details