Aquatic Panda — APT Profile
Aquatic Panda is a suspected China-based threat group with a dual mission of intelligence collection and industrial espionage. Active since at least May 2020, Aquatic Panda has primarily targeted entities in the telecommunications, technology, and government sectors.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
IntelFusions coverage (1)
- Chinese cyberspies hit governments with a stealthier Windows backdoor 2026-06-17 · Nation-State
Tools & malware
- Cobalt Strike Adversary Simulation
- njRAT Remote Access Trojan
- ShadowPad Backdoor
- Wevtutil Discovery
- Winnti for Linux Backdoor
- Winnti for Windows Backdoor
Vendor research
- OverWatch Exposes AQUATIC PANDA in Possession of Log4Shell Exploit Tools During Hands-on Intrusion Attempt Crowdstrike
Countries linked to this actor
- Peru targets