Ocean Buffalo
Discover the adversaries targeting your industry
Back to Adversary Universe
OCEAN BUFFALO is a Vietnam-based targeted intrusion adversary reportedly active since at least 2012. This adversary is known to employ a wide range of Tactics, Techniques, and Procedures (TTPs), to include the use of both custom and off-the-shelf tools as well as the distribution of malware via Strategic Web Compromise (SWC) operations and spear phishing emails containing malicious attachments. Ta...
-
Ocean Buffalo
-
Vietnam, Southeast Asia, Asia
Community Identifiers
Canvas Cyclone, OceanLotus, APT32, TIN WOODLAWN, Scarlet Ioke, Dark Pink, BISMUTH, SeaLotus, Saaiwc Group, APT-LY-1005
Objective
Intelligence Gathering, Intellectual Property Theft
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
