Skip to content
UnclassifiedUnknown

Vapor Panda

Vapor Panda is a threat actor group, tracked by Brandefense. It targets the Finance sector in the United States and South Korea. It uses 5 MITRE ATT&CK techniques.

Techniques
5
Exploited CVEs
No CVE data
Record updated

Who They Target.

Sectors · 1

How They Operate · MITRE ATT&CK.

5 techniques across 3 of 14 tactics

Reconnaissance2

T1071.001
Application Layer Protocol: Web Protocols
T1595
Active Scanning

Resource Development·

Initial Access2

T1078
Valid Accounts
T1190
Exploit Public-Facing Application

Execution·

Persistence·

Privilege Escalation·

Defense Evasion·

Credential Access·

Discovery·

Lateral Movement·

Collection1

T1213
Data from Information Repositories

Command and Control·

Exfiltration·

Impact·

Arsenal · Malware And Tools.

  • ARTEX AItool

About Vapor Panda.

A cyber-espionage group that used the ARTEX AI framework in a global campaign targeting 200 organizations.

Last updated Nov 4, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.