APTs Attack Simulation

A comprehensive collection of simulated Advanced Persistent Threat (APT) attacks based on real-world tactics, techniques, and procedures (TTPs) used by state-sponsored APT Groups from Russia, China, Iran, and North Korea.

🧠 Overview

This repository contains detailed simulations of APT campaigns targeting various critical sectors. Each simulation includes custom tools, command and control (C2) servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious tools that mirror those used in actual attacks. The simulations are based on extensive research from leading cybersecurity firms including Palo Alto Unit42, Kaspersky, Microsoft, Cisco, Trellix, CrowdStrike, and WithSecure.

Caution

Important Notice: This project is strictly for educational, research, and defensive security purposes only. Unauthorized use of these techniques may violate laws and result in serious legal consequences.

🎯 Simulated APT Groups

The naming convention for APT groups follows CrowdStrike's taxonomy. Below is the complete list of simulated APT Groups:

Country of Origin	Russia 🇷🇺	China 🇨🇳	North Korea 🇰🇵	Iran 🇮🇷
APT Groups	Cozy Bear ✅	Mustang Panda ✅	Labyrinth Chollima ✅	Helix Kitten
	Voodoo Bear ✅	Glacial Panda	Velvet Chollima ✅	Pioneer Kitten
	Fancy Bear ✅	Wicked Panda ✅	Famous Chollima ✅	Clever Kitten
	Energetic Bear ✅	Goblin Panda	Stardust Chollima ✅	Static Kitten
	Berserk Bear ✅	Anchor Panda	Ricochet Chollima	Tracer Kitten
	Gossamer Bear ✅	Deep Panda	Silent Chollima	Nemesis Kitten
	Primitive Bear ✅	Samurai Panda		Spectral Kitten
	Ember Bear ✅	Phantom Panda		Charming Kitten
	Venomous Bear ✅	Sunrise Panda
		Ethereal Panda