CrowdStrike 2026 Global Threat Report: The definitive threat intelligence report for the AI era Download report
Vault Panda
Discover the adversaries targeting your industry
Back to Adversary Universe
VAULT PANDA, an adversary active since at least October 2021, targets the financial services, gambling, technology, academic, defense, and government sectors. These activities are likely intended to facilitate intelligence collection. VAULT PANDA has access to multiple shared China-nexus malware families, including KEYPLUG, Winnti, Melofee, HelloBot, and ShadowPad. Additionally, the adversary use...
-
Vault Panda
-
China, East Asia, Asia
Community Identifiers
UNC6588
Objective
Intelligence Gathering
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
