CrowdStrike 2026 Global Threat Report: The definitive threat intelligence report for the AI era Download report

Stalker Panda

Discover the adversaries targeting your industry

Back to Adversary Universe
pandaalt

STALKER PANDA is a China-based targeted intrusion adversary operating since at least 2010. Targets are focused in East Asia (Japan, Hong Kong, and Taiwan) with some high-profile operations against aviation sector organizations in 2016.  This actor has been observed using three unique RATs in its operations: Elirks, SharpServer, and BlogRelay. These malware variants primarily use blogging sites or ...

  • Stalker Panda

  • China, East Asia, Asia

Community Identifiers

Tick, BRONZE BUTLER, Redbaldknight, Swirl Typhoon

Objective

Motivation

State-Sponsored

Contact sales

Thank you for your request!

A member of our team will be in touch shortly

Contact our team about IOCs for this adversary

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.
Contact us
Adversaries Map

Who's targeting your industry?

Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.

View adversaries
Threat Hunting report spread

CrowdStrike 2025 Threat Hunting Report


Adversaries weaponize and target AI at scale.
Learn more