Elderwood
Elderwood is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 11 sectors, including Government and Technology, in 15 countries, including the United States and the United Kingdom. It uses 10 MITRE ATT&CK techniques and exploits 12 known CVEs.
- Elderwood Gang
- Beijing Group
- Sneaky Panda
- Origin
- China
- Techniques
- 10
- Exploited CVEs
- 12
- First seen
- Sep 6, 2012
- Last seen
- Sep 14, 2012
- Record updated
Who They Target.
About Elderwood.
Elderwood is a suspected Chinese cyber espionage group that was reportedly responsible for the 2009 Google intrusion known as Operation Aurora. The group has targeted defense organizations, supply chain manufacturers, human rights and nongovernmental organizations (NGOs), and IT service providers.
Last updated Jul 7, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.