RoyalAPT is an alternate name for the group known as Ke3chang

---

RoyalAPT is an advanced persistent threat (APT) that has been active since at least 2017 and targets government agencies, defense contractors, telecommunications companies, financial institutions, and other high-value organizations in the United States, Europe, Asia, Africa, Latin America, and Australia. It uses a variety of techniques to compromise its victims\' systems, including spear phishing emails with malicious attachments or links, exploiting vulnerabilities in software such as Microsoft Office, Adobe Flash Player, and Java, and using social engineering tactics like impersonation and baiting. Once inside the targeted network, RoyalAPT can steal sensitive information, conduct surveillance operations, install backdoors for future access, or launch destructive attacks on critical infrastructure. The group has been linked to various nation-state actors, including China\'s People\'s Liberation Army (PLA) and Russia\'s Federal

Techniques, tactics and practices:

RoyalAPT uses a variety of techniques to compromise its victims\' systems. These include spear phishing emails with malicious attachments or links, exploiting vulnerabilities in software such as Microsoft Office, Adobe Flash Player, and Java, and using social engineering tactics like impersonation and baiting. Once inside the targeted network, RoyalAPT can steal sensitive information, conduct surveillance operations, install backdoors for future access, or launch destructive attacks on critical infrastructure. The group has been linked to various nation-state actors, including China\'s People\'s Liberation Army (PLA) and Russia\'s Federal Security Service (FSB).