Operator Panda
Discover the adversaries targeting your industry
Back to Adversary Universe
Since at least November 2024, China-nexus targeted intrusion adversary OPERATOR PANDA has conducted operations against the telecom and professional services sectors. OPERATOR PANDA relies heavily on exploiting internet-facing appliances—such as Cisco switches—for initial access. OPERATOR PANDA’s activity targeting Cisco edge devices at U.S.-based entities aligns with Salt Typhoon, a publicly repo...
-
Operator Panda
-
China, East Asia, Asia
Community Identifiers
Salt Typhoon, GhostEmperor, RedMike, UNC5807
Objective
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
