SharpPanda — APT Profile
SharpPanda is a Chinese-nexus cyber espionage cluster tracked by Check Point Research since 2018, focused on government entities across Southeast Asia; Check Point's 2023 reporting names Vietnam, Indonesia and Thailand as recurring targets. Intrusions typically begin with spear-phishing that delivers weaponised RTF documents built with the RoyalRoad/8.t toolkit, leading through the VictoryDll and SoulSearcher loaders to the modular Soul backdoor framework, a plugin-driven implant whose code lineage predates the campaigns it now serves.Also tracked as
Sharp Panda, Sharp Dragon
Vendor research
- Sharp Dragon Expands Towards Africa and The Caribbean Check Point Research
- Pandas with a Soul: Chinese Espionage Attacks Against Southeast Asian Government Entities Check Point Research
- SharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor Check Point Research
Countries linked to this actor
- Vietnam targets