Skip to content
Nation-state APTEspionageAdvanced sophistication

China Panda

China Panda is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Government sector in Vietnam. It uses 7 MITRE ATT&CK techniques.

Techniques
7
Exploited CVEs
No CVE data
First seen
Dec 19, 2020
Last seen
Dec 19, 2020
Record updated

Who They Target.

Sectors · 1
Countries · 1

How They Operate · MITRE ATT&CK.

7 techniques across 5 of 14 tactics

Reconnaissance2

T1012
Query Registry
T1082
System Information Discovery

Resource Development1

T1195.002
Supply Chain Compromise: Compromise Software Supply Chain

Initial Access·

Execution2

T1053.005
Scheduled Task/Job: Scheduled Task
T1140
Deobfuscate/Decode Files or Information

Persistence1

T1543.003
Create or Modify System Process: Windows Service

Privilege Escalation·

Defense Evasion1

T1036.005
Masquerading: Match Legitimate Resource Name or Location

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact·

Arsenal · Malware And Tools.

  • extrac32tool

Campaigns.

  1. Operation SignSightDec 2020

Indicators Of Compromise.

TLP:AMBER

1 indicator on the Brandefense platform

IP, domain and hash indicators · YARA rules · ATT&CK Navigator export

Request A Demo

About China Panda.

A suspected Chinese state-sponsored cyber espionage threat group known for targeting foreign government entities and critical supply chains.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.