{
	"id": "887f193c-79d5-44d7-aa8e-53f37be5ceec",
	"created_at": "2026-04-06T00:17:41.223664Z",
	"updated_at": "2026-04-10T13:12:49.326125Z",
	"deleted_at": null,
	"sha1_hash": "20c157d953a296c4f1a78eaa13eda932657a8d95",
	"title": "C-60 - Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 50353,
	"plain_text": "C-60 - Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 16:57:39 UTC\n APT group: APT-C-60\nNames\nAPT-C-60 (Qihoo 360)\nAPT-Q-12 (?)\nCountry South Korea\nMotivation Information theft and espionage\nFirst seen 2018\nDescription\n(ThreatBook) APT-C-60 is disclosed by domestic security vendors in 2021. It is reported that\nthe earliest attack time can be traced back to 2018 and the attack targets human resources and\ntrade-related institutions including China. Recent monitoring by ThreatBook Intelligence\nResearch and Response Team found that the Group has been active since December 2021. In\nJune this year, the Group launched targeted attacks on targets in S. Korea.\nObserved Countries: East Asia.\nTools used SpyGlace.\nInformation\nLast change to this card: 26 December 2024\nDownload this actor card in PDF or JSON format\nSource: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=d95fc4ff-3e71-4ab2-aa09-91e7efa56b13\nhttps://apt.etda.or.th/cgi-bin/showcard.cgi?u=d95fc4ff-3e71-4ab2-aa09-91e7efa56b13\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/showcard.cgi?u=d95fc4ff-3e71-4ab2-aa09-91e7efa56b13"
	],
	"report_names": [
		"showcard.cgi?u=d95fc4ff-3e71-4ab2-aa09-91e7efa56b13"
	],
	"threat_actors": [
		{
			"id": "15b8d5d8-32cf-408b-91b1-5d6ac1de9805",
			"created_at": "2023-07-20T02:00:08.724751Z",
			"updated_at": "2026-04-10T02:00:03.341845Z",
			"deleted_at": null,
			"main_name": "APT-C-60",
			"aliases": [
				"APT-Q-12"
			],
			"source_name": "MISPGALAXY:APT-C-60",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "ab47428c-7a8e-4ee8-9c8e-4e55c94d2854",
			"created_at": "2024-12-28T02:01:54.668462Z",
			"updated_at": "2026-04-10T02:00:04.564201Z",
			"deleted_at": null,
			"main_name": "APT-C-60",
			"aliases": [
				"APT-Q-12"
			],
			"source_name": "ETDA:APT-C-60",
			"tools": [
				"SpyGlace"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434661,
	"ts_updated_at": 1775826769,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/20c157d953a296c4f1a78eaa13eda932657a8d95.pdf",
		"text": "https://archive.orkl.eu/20c157d953a296c4f1a78eaa13eda932657a8d95.txt",
		"img": "https://archive.orkl.eu/20c157d953a296c4f1a78eaa13eda932657a8d95.jpg"
	}
}