APT21 — APT Profile
APT21, also known as Zhenbao and Hammer Panda, is a Chinese cyber espionage group active since at least 2010. The group focuses on collecting intelligence related to Russian state security matters and monitoring Tibetan and Uyghur diaspora communities, operating through spear-phishing and strategic web compromises.Also tracked as
HAMMER PANDA, TEMP.Zhenbao
Tools & malware
- win.nettraveler Backdoor
- win.plugx Backdoor
Vendor research
- NetTraveler, APT 21, Hammer Panda - Threat Group Cards: A Threat Actor Encyclopedia ThaiCERT (ETDA)
- Hammer Panda Adversary Profile | CrowdStrike CrowdStrike
- Dissecting APT21 samples using a step-by-step approach CYBER GEEKS (CyberMasterV)
- APT groups and threat actors Google Threat Intelligence (Mandiant)