Envoy Panda

ENVOY PANDA is a China-nexus targeted intrusion adversary active since 2011. The adversary consistently targets Africa- and Middle East-based government entities—particularly in the diplomatic space—and leverages malware families such as Turian, PlugX, GoClient, and Smanager in cyberespionage operations.    ENVOY PANDA’s operational security posture has improved over time; the adversary now levera...