Skip to content
Nation-state APTEspionageAdvanced sophistication · State-backed

menuPass

menuPass is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 18 sectors, including Government and Technology, in 35 countries, including the United States and the United Kingdom. It uses 100 MITRE ATT&CK techniques and exploits 22 known CVEs.

Also known as
  • Cicada
  • POTASSIUM
  • Stone Panda
  • Red Apollo
  • CVNX
  • HOGFISH
  • BRONZE RIVERSIDE
  • APT10
Origin
China
Techniques
100
Exploited CVEs
22
First seen
Jan 1, 2006
Last seen
Jun 23, 2022
Record updated

Who They Target.

Labelsespionage

About menuPass.

menuPass is a threat group that has been active since at least 2006. Individual members of menuPass are known to have acted in association with the Chinese Ministry of State Security's (MSS) Tianjin State Security Bureau and worked for the Huaying Haitai Science and Technology Development Company.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.