GOBLIN PANDA is a China-nexus adversary first observed in September 2013, primarily engaged in targeted intrusion operations to support the intelligence collection priorities of the Chinese Communist Party (CCP). The group's initial activities, particularly in 2014, were notably heightened by tensions surrounding the South China Sea. Over time, GOBLIN PANDA has demonstrated an evolution in its operational sophistication, moving from commodity malware usage to developing custom tools designed for exfiltrating data from air-gapped networks. The group is distinguished by its focused targeting of government, defense, and energy sectors in Southeast Asian nations, with a significant emphasis on Vietnam, often utilizing politically themed lure documents tailored to the region. GOBLIN PANDA operates under several aliases, including Cycldek and Conimes, and has also been associated with names like APT27 and Earth Zhulong.

Aliases del actor

CycldekConimesHellsingConimes TeamChina1937CN Teamotros mencionados en fuentes OSINT verificadasapt 27apt27bronze unioncycldekemissary pandagoblin pandagroup 35iron tigerluckymousetemp

Actores similares

APT27 (Emissary Panda)actor · 1Temper Pandaapt · 0Union Pandaapt · 0goblin-pandaactor · 1Mustang Pandaapt · 1Putter Pandaapt · 1Stone Pandaapt · 0Vicious Pandaapt · 0Pitty Pandaapt · 0Hurricane Pandaapt · 0