Monday 2 November
Global

Your region, kept on this device.

Deep Panda

Threat actor

Attributed to China by MITRE ATT&CK (source). An attribution, not a proven fact.

Names and who uses them

  • Deep PandaOur name
  • KungFu KittensMITRE ATT&CK
  • PinkPantherMITRE ATT&CK
  • Shell CrewMITRE ATT&CK
  • WebMastersMITRE ATT&CK
  • Black VineSymantec

Targets

Sectors: Government, Defence, Finance, Telecommunications

Source: MITRE ATT&CK

Known techniques

  • T1018Remote System Discovery
  • T1021.002SMB/Windows Admin Shares
  • T1027.005Indicator Removal from Tools
  • T1047Windows Management Instrumentation
  • T1057Process Discovery
  • T1059.001PowerShell
  • T1218.010Regsvr32
  • T1505.003Web Shell
  • T1546.008Accessibility Features
  • T1564.003Hidden Window
Source: MITRE ATT&CK

Malware and tools used

Source: MITRE ATT&CK

Recent news

No stories yet.