Horde Panda
Discover the adversaries targeting your industry
Back to Adversary Universe
HORDE PANDA is a China-based targeted intrusion adversary with a likely intelligence collection mission. HORDE PANDA has been active since at least mid-2023, and the adversary’s operations primarily focus on entities in the telecommunications sector in South Asia. HORDE PANDA leverages several shared China-nexus malware families, including KEYPLUG, ShadowPad, Proxip, and PlugX. The adversary also ...
-
Horde Panda
-
China, East Asia, Asia
Community Identifiers
Red Dev 40, Sandman APT, STORM-0866
Objective
Intelligence Gathering
Motivation
State-Sponsored
CrowdStrike 2026 Threat Hunting Report
Get insights from frontline experts.