Horde Panda
Discover the adversaries targeting your industry
Back to Adversary Universe
HORDE PANDA is a China-based targeted intrusion adversary with a likely intelligence collection mission. HORDE PANDA has been active since at least mid-2023, and the adversary’s operations primarily focus on entities in the telecommunications sector in South Asia. HORDE PANDA leverages several shared China-nexus malware families, including KEYPLUG, ShadowPad, Proxip, and PlugX. The adversary also ...
-
Horde Panda
-
China, East Asia, Asia
Community Identifiers
Sandman APT, STORM-0866, Red Dev 40
Objective
Intelligence Gathering
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
