THREAT_ACTOR · G0068
PLATINUM
Also known as: PLATINUM
Profile
PLATINUM is an activity group that has targeted victims since at least 2009. The group has focused on targets associated with governments and related organizations in South and Southeast Asia.
MITRE ATT&CK ↗Techniques
11 ATT&CK techniques attributed to this actor.
T1003.001 LSASS MemoryT1036 MasqueradingT1055 Process InjectionT1056.001 KeyloggingT1056.004 Credential API HookingT1068 Exploitation for Privilege EscalationT1095 Non-Application Layer ProtocolT1105 Ingress Tool TransferT1189 Drive-by CompromiseT1204.002 Malicious FileT1566.001 Spearphishing Attachment
Software
3 malware/tools attributed to this actor.
DipsindJPINadbupd
Related corpus activity
9,512 indicators EXHIBIT techniques this actor uses. This is a shared-technique signal, not a first-party attribution to PLATINUM.
| Indicator | Type | Family | Sev | Src |
|---|---|---|---|---|
| cve-2026-4368 | cve | ransomware | 85 | 1 |
| cve-2025-1055 | cve | ransomware | 85 | 3 |
| cve-2025-68670 | cve | — | 85 | 2 |
| cve-2025-2492 | cve | — | 85 | 2 |
| cve-2025-34085 | cve | — | 85 | 1 |
| cve-2023-52271 | cve | ransomware | 85 | 3 |
| cve-2026-22584 | cve | — | 85 | 2 |
| cve-2025-11837 | cve | — | 85 | 2 |
| cve-2026-3102 | cve | — | 85 | 3 |
| cve-2020-22658 | cve | — | 85 | 2 |
| cve-2026-0740 | cve | — | 85 | 1 |
| cve-2025-12057 | cve | — | 85 | 1 |
| cve-2025-61155 | cve | ransomware | 85 | 3 |
| cve-2025-23304 | cve | — | 85 | 2 |
| cve-2025-66478 | cve | — | 85 | 2 |
| cve-2025-0921 | cve | — | 85 | 2 |
| cve-2021-27076 | cve | — | 85 | 1 |
| cve-2013-3307 | cve | — | 85 | 2 |
| cve-2024-1781 | cve | — | 85 | 1 |
| cve-2018-8007 | cve | — | 85 | 1 |
| cve-2023-44976 | cve | ransomware | 85 | 2 |
| cve-2020-22653 | cve | — | 85 | 2 |
| cve-2021-29441 | cve | — | 85 | 1 |
| cve-2026-1969 | cve | — | 85 | 1 |
| cve-2016-5681 | cve | — | 85 | 2 |
| cve-2026-3844 | cve | — | 85 | 1 |
| cve-2025-7443 | cve | — | 85 | 1 |
| cve-2025-7852 | cve | — | 85 | 1 |
| cve-2022-47945 | cve | — | 85 | 1 |
| cve-2017-17215 | cve | — | 85 | 2 |
Showing the top 30 by severity of 9,512.