CHIMBORAZO is an alternate name for the group known as TA505

---

CHIMBORAZO is an advanced persistent threat (APT) that targets government and military organizations, financial institutions, and critical infrastructure sectors such as energy, transportation, and healthcare. It has been active since at least 2013 and uses a variety of tactics to compromise its target systems, including spear-phishing emails, malware downloads from legitimate websites, and exploiting vulnerabilities in software or hardware. CHIMBORAZO is believed to be linked to the Chinese government and has been associated with other APT groups such as POTASSIUM, BLACKOUT, and MAGICKTANGO. Its primary objective appears to be stealing sensitive information from its targets for intelligence gathering purposes.

Techniques, tactics and practices:

CHIMBORAZO uses a variety of techniques to compromise its target systems. Some of these include spear-phishing emails, which are crafted to appear legitimate and trick the recipient into opening an attachment or clicking on a link that downloads malware onto their system; exploiting vulnerabilities in software or hardware through zero-day attacks; using social engineering tactics such as impersonation of trustworthy individuals or organizations to gain access to sensitive information. CHIMBORAZO also uses stealth techniques, such as hiding its activity within legitimate network traffic and avoiding detection by security tools. Additionally, it has been known to use sophisticated malware that can evade traditional antivirus software and persist on the target system for extended periods of time.