# Unfading Sea Haze: threat group profile

> Unfading Sea Haze is a threat group thought to operate from China. Public reporting about it is still limited. This free profile brings together what is known about it, so you can judge the risk to you. It lists the other names the group goes by and links to every public report behind it.

Canonical page: https://www.edgeprotect.io/threat-actors/unfading-sea-haze
Breadcrumb: [Home](https://www.edgeprotect.io/) > [Threat groups](https://www.edgeprotect.io/threat-actors) > Unfading Sea Haze

## At a glance

| Fact | Value |
|---|---|
| Attack techniques | 0 |
| Thought to operate from | China |
| Other names | 0 |
| Public reports | 2 |

## Who is Unfading Sea Haze?

Unfading Sea Haze is a threat group thought to operate from China. Public reporting about it is still limited.

### What public reporting says

> Unfading Sea Haze is a threat actor focused on espionage, targeting government and military organizations in the South China Sea region since 2018. They employ spear-phishing emails with malicious attachments to gain initial access, followed by the deployment of custom malware such as Gh0st RAT variants and SharpJSHandler. The group utilizes scheduled tasks and manipulates local administrator accounts for persistence, while also incorporating Remote Monitoring and Management tools into their attacks. Unfading Sea Haze demonstrates a sophisticated and patient approach, remaining undetected for years and showing adaptability through evolving exfiltration tactics and malware arsenal.

## Public reports about Unfading Sea Haze

- https://www.securityweek.com/newly-detected-chinese-group-targeting-military-government-entities/
- https://www.bleepingcomputer.com/news/security/unfading-sea-haze-hackers-hide-on-military-and-govt-networks-for-6-years/

## Frequently asked questions

### Who is Unfading Sea Haze?

Unfading Sea Haze is a threat group thought to operate from China. Public reporting about it is still limited.

### Where is Unfading Sea Haze thought to be based?

Public reporting places Unfading Sea Haze as operating from China. Attribution is never certain: it rests on the tools, infrastructure and targets researchers have seen.

### How do I know if Unfading Sea Haze is a risk to my business?

Create an account and tell us the software you run. We match it against known flaws, including those linked to threat groups, rank each one from 0 to 100 and tell you as soon as we spot something that affects you.

## Check whether it matters to your business

A free EdgeProtect account (no card needed) matches the software you run against known flaws, including those linked to threat groups, ranks each one from 0 to 100 and tells you as soon as we spot something that affects you. It also shows which threat groups and ransomware gangs are hitting your sector, with profiles of over 900 groups and a PDF dossier for each.

- Start free: https://www.edgeprotect.io/register
- Book a demo: https://www.edgeprotect.io/contact