Ocean Buffalo
Discover the adversaries targeting your industry
Back to Adversary Universe
OCEAN BUFFALO is a Vietnam-based targeted intrusion adversary reportedly active since at least 2012. This adversary is known to employ a wide range of Tactics, Techniques, and Procedures (TTPs), to include the use of both custom and off-the-shelf tools as well as the distribution of malware via Strategic Web Compromise (SWC) operations and spear phishing emails containing malicious attachments. Ta...
-
Ocean Buffalo
-
Vietnam, Southeast Asia, Asia
Community Identifiers
SeaLotus, APT32, OceanLotus, TIN WOODLAWN, Scarlet Ioke, Dark Pink, Saaiwc Group, APT-LY-1005, Canvas Cyclone, BISMUTH
Objective
Intellectual Property Theft, Intelligence Gathering
Motivation
State-Sponsored
CrowdStrike 2026 Threat Hunting Report
Get insights from frontline experts.