[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXkLkG-rbshdTs_dk15S-F9wcZ5-BVbAI8G_kGgtkMWg":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":10,"target_industries":11,"target_countries":12,"incident_types":13,"references":14,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"SongXY","songxy",[],"SongXY is a Chinese APT group that employs phishing tactics to initiate cyberespionage campaigns. They utilize the Royal Road RTF builder, exploiting the CVE-2018-0798 vulnerability in Microsoft Equation Editor. In one instance, they sent a document containing a link to an attacker-controlled server, which automatically triggered upon opening, allowing them to gather information about the target's system configuration.",null,[],[],[],[15,16],"https:\u002F\u002Fwww.ptsecurity.com\u002Fww-en\u002Fanalytics\u002Fpt-esc-threat-intelligence\u002Fcovid-19-and-new-year-greetings-the-higaisa-group\u002F","http:\u002F\u002Fwww.ptsecurity.com\u002Fupload\u002Fcorporate\u002Fww-en\u002Fanalytics\u002FAPT-Attacks-eng.pdf",[],0,"2024-10-08T01:15:02.687574+00:00",{"title":21,"metaDescription":22,"keywords":23},"SongXY Threat Actor Profile | EdgeProtect","SongXY is a Chinese APT group that employs phishing tactics to initiate cyberespionage campaigns. They utilize the Royal Road RTF builder, exploiting ...","SongXY, threat actor, APT, cyber threat, threat intelligence",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":9,"url":28,"mainEntityOfPage":29},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fsongxy",{"@type":30,"@id":28},"WebPage"]