Threat actor · all actors
PatchworkG0040 state
🇮🇳 IN
aka Patchwork, Hangover Group, Dropping Elephant, Chinastrats, MONSOON, Operation Hangover, QUILTED TIGER, Sarit, APT-C-09, ZINC EMERSON, ATK11, G0040, Orange Athos, Thirsty Gemini
Last updated: 2026-07-03
About this actor
[Patchwork](https://attack.mitre.org/groups/G0040) is a cyber espionage group that was first observed in December 2015. While the group has not been definitively attributed, circumstantial evidence suggests the group may be a pro-Indian or Indian entity. [Patchwork](https://attack.mitre.org/groups/G0040) has been seen targeting industries related to diplomatic and government agencies. Much of the code used by this group was copied and pasted from online forums. [Patchwork](https://attack.mitre.org/groups/G0040) was also seen operating spearphishing campaigns targeting U.S. think tank groups in March and April of 2018.(Citation: Cymmetria Patchwork) (Citation: Symantec Patchwork)(Citation: TrendMicro Patchwork Dec 2017)(Citation: Volexity Patchwork June 2018)
Source: MITRE ATT&CK
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
T1005T1021T1021.001T1027T1027.001T1027.002T1027.005T1027.010T1033T1036T1036.005T1053T1053.005T1055T1055.012T1059T1059.001T1059.003T1059.005T1070T1070.004T1074T1074.001T1082T1083T1102T1102.001T1105T1112T1119T1132T1132.001T1189T1197T1203T1204T1204.001T1204.002T1518T1518.001T1547T1547.001T1548T1548.002T1553T1553.002T1555T1555.003T1559T1559.002T1560T1566T1566.001T1566.002T1574T1574.001T1587T1587.002T1588T1588.002T1598T1598.003T1680
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-4 | 43 / 63 | 68% |
CM-6 | 37 / 63 | 59% |
CM-2 | 35 / 63 | 56% |
SI-3 | 34 / 63 | 54% |
AC-6 | 25 / 63 | 40% |
CA-7 | 24 / 63 | 38% |
CM-7 | 23 / 63 | 37% |
SC-7 | 22 / 63 | 35% |
AC-3 | 21 / 63 | 33% |
SI-2 | 21 / 63 | 33% |
AC-4 | 20 / 63 | 32% |
AC-2 | 19 / 63 | 30% |
SI-7 | 19 / 63 | 30% |
CM-8 | 14 / 63 | 22% |
RA-5 | 14 / 63 | 22% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- Sidewinder 0.42
- BRONZE BUTLER 0.41
- Cobalt Group 0.37
- APT37 0.36
- MuddyWater 0.35
Same nation-state
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00