Operation Titan Rain - Threat Group Cards: A Threat Actor
Encyclopedia
Archived: 2026-04-05 22:22:59 UTC
Home > List all groups > Operation Titan Rain
 APT group: Operation Titan Rain
Names Operation Titan Rain (US Government)
Country China
Sponsor State-sponsored, PLA Unit 61398
Motivation Information theft and espionage
First seen 2003
Description
(Kaspersky) Hacks against the Defense Department and other U.S. agencies stretching back to 2003 were codenamed Ti
Rain by investigators. The attacks, which breachedhundreds of networks, including Departments of State, Energy and
Homeland Security, were coordinated from Chinese computers, investigators found. Global defense contractor Lockheed
Martin and NASA were also struck in what many experts called an attempt to glean information on U.S. systems. While
usually difficult to locate the country of origin for such attacks, researchers were able to trace them back to the Chinese
province of Guangdong. However, the individuals behind the operation remain a mystery to this day.
Observed
Sectors: Defense, Energy, Government.
Countries: UK, USA.
Tools used
Information
Last change to this card: 02 July 2020
Download this actor card in PDF or JSON format
Source: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=2af8b84d-172a-4946-9873-8d17e028e9c9
https://apt.etda.or.th/cgi-bin/showcard.cgi?u=2af8b84d-172a-4946-9873-8d17e028e9c9
Page 1 of 1