Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Threat Actors Poison Carp

Poison Carp

TLP:CLEAR
Active
Kill Chain Analysis Generate Graph Hunt Package

Also known as: Evil Eye, Red Dev 16, Earth Empusa

Description

**Targets:** This threat actor targets smartphones associated with Tibetan and Uyghur activists for espionage purposes. **Modus Operandi:** Strategic web compromise (watering hole)

TTP Summary

Evil Eye; Strategic web compromise (watering hole)

AI Analysis

No AI analysis yet.

ATT&CK Techniques

No techniques linked yet.

Software / Tooling

No tools linked yet.

Campaigns / Victims

All campaigns →
Active

Evil Eye

TLP:CLEAR

Observed Data

No observed data linked yet.

Indicators of Compromise

View all →
IPv4 Address 1
IPv4 Address 1
74.120.172.10
50% TLP:CLEAR
Open in full Indicators list →

References

No references recorded yet.

Intel Summary

0

Techniques

0

Tools

1

Campaigns

1

IOCs

0

Observed Data

0

Tactics

Tags

APT

Details

Type
Nation-State
Resource Level
Government
Primary Motivation
Espionage
Country of Origin
China (CN)
Confidence
70%
Added
May 4, 2026
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.