IndigoZebra

MISP
Type:
Unknown
Country:
CN
First seen:
Unknown
Details:

IndigoZebra is a Chinese state-sponsored actor mentioned for the first time by Kaspersky in its APT Trends report Q2 2017, targeting, at the time of its discovery, former Soviet Republics with multiple malware strains including Meterpreter, Poison Ivy, xDown, and a previously unknown backdoor called “xCaon.”

MITRE ATT&CK: View on MITRE
Techniques Used (7)
ID ATT&CK Tactics
T1105 Ingress Tool Transfer -
T1204.002 Malicious File -
T1566.001 Spearphishing Attachment -
T1583.001 Domains -
T1583.006 Web Services -
T1586.002 Email Accounts -
T1588.002 Tool -
References (3)
Related Malware (3)
BoxCaon
other
PoisonIvy
other
xCaon
other
Metadata
ID: 459
Created: 13/01/2026 17:48
Updated: 07/03/2026 04:00