Skip to content
Install MCP

Threat actor

Noldus Information Technology

Last fetched

Noldus Information Technology is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Noldus Information Technology, a Dutch company, specializes in emotion recognition systems and digital surveillance technology. Their "FaceReader" software, which automatically analyzes facial expressions such as anger, happiness, sadness, surprise, and disgust, has been sold to public security and law enforcement institutions in China. The software has been used by Chinese universities with ties to the public security apparatus and police, as well as the Ministry of Public Security. Amnesty International revealed that Noldus supplied its technology to at least two universities in Xinjiang between 2012 and 2018, including "The Observer XT" software to Shihezi University, which is administered by the Xinjiang Production and Construction Corps (XPCC). XPCC plays a key role in maintaining China's unification, social stability in Xinjiang, and in combating what the government labels as violent terrorist crimes. By 2012, it was already recognized that the Chinese government was conflating Uyghur cultural and religious practices with terrorism, and in the following years, technology for suppressing minorities in Xinjiang, particularly emotion and behavioral analysis systems, became a focus of Chinese authorities.

Techniques by tactic

No ATT&CK techniques are recorded for Noldus Information Technology in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Noldus Information Technology today — this states the absence of a published link, not that Noldus Information Technology has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Noldus Information Technology into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.