[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fygIedvlXNXIk7zxfO4GJ3oMBBgII3hUr3tq728k6w6k":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":17,"references":18,"techniques":20,"technique_count":21,"created_at":22,"seoMetadata":23,"schemaOrg":27},"DEV-0147","dev-0147",[],"DEV-0147 is a China-based cyber espionage actor was observed compromising diplomatic targets in South America, a notable expansion of the group's data exfiltration operations that traditionally targeted gov't agencies and think tanks in Asia and Europe. DEV-0147 is known to use tools like ShadowPad, a remote access trojan associated with other China-based actors, to maintain persistent access, and QuasarLoader, a webpack loader, to deploy additional malware. DEV-0147's attacks in South America included post-exploitation activity involving the abuse of on-premises identity infrastructure for recon and lateral movement, and the use of Cobalt Strike for command and control and data exfiltration.","CN",null,[],[14,15,16],"South America","Asia","European Union",[],[19],"https:\u002F\u002Ftwitter.com\u002FMsftSecIntel\u002Fstatus\u002F1625181255754039318",[],0,"2023-08-09T17:25:09.409843+00:00",{"title":24,"metaDescription":25,"keywords":26},"DEV-0147 Threat Actor Profile | EdgeProtect","DEV-0147 is a China-based cyber espionage actor was observed compromising diplomatic targets in South America, a notable expansion of the group's data...","DEV-0147, threat actor, APT, cyber threat, threat intelligence, CN",{"@context":28,"@type":29,"name":6,"alternateName":30,"description":9,"url":31,"mainEntityOfPage":32,"location":34},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fdev-0147",{"@type":33,"@id":31},"WebPage",{"@type":35,"name":10},"Country"]