Horde Panda

China

Details

HORDE PANDA is a China-based targeted intrusion adversary with a likely intelligence collection mission. HORDE PANDA has been active since at least mid-2023, and the adversary’s operations primarily focus on entities in the telecommunications sector in South Asia. HORDE PANDA leverages several shared China-nexus malware families, including KEYPLUG, ShadowPad, Proxip, and PlugX. The adversary also ...

Community Identifiers

p6l7jSVdecPXQwk

Objective

  • rGigHwA87UDdK1I2lM4vzNC

Motivation

  • rZ2bV8J4YxhpuwT

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.