Xiaoqiying
Aliases: Genesis Day, Teng Snake
- First seen
- 2023-01-15 00:00:00
- Origin
- CN
- Primary motivation
- ideology
- Sophistication
- intermediate
- Resource level
- team
- Actor type
- hacktivist
- Profile updated
- 2026-07-07 12:04:54
Targeted industries: education-and-nonprofits government-and-public-sector
Targeted regions: country_code:kr country_code:jp country_code:tw
Context
Xiaoqiying is a primarily Chinese-speaking threat group that is most well known for conducting website defacement and data exfiltration attacks on more than a dozen South Korean research and academic institutions in late-January 2023. Research from Recorded Futures Insikt Group has found that the groups affiliated threat actors have signaled a new round of cyberattacks against organizations in Japan and Taiwan. Although it shows no clear ties to the Chinese government, Xiaoqiying is staunchly pro-China and vows to target NATO countries as well as any country or region that is deemed hostile to China.
Reports & references
- recordedfuture.com — Xiaoqiying Genesis Day Threat Actor Group Targets South Korea Taiwan (report)
- medium.com — %E5%8F%98%E8%84%B8 Teng Snake A K A Code Core 8C35268B4D1A (report)
- therecord.media — Samsung Investigating Claims Of Hack On South Korea Systems Internal Employee Platform (report)