Stone Panda

STONE PANDA is a China-based adversary who primarily uses spear phishing campaigns leveraging malicious Microsoft Office documents to target U.S. and foreign defense contractors, healthcare, government and telecommunication sectors. Operations before 2017 made heavy use of the Poison Ivy Remote Access Tool (RAT) with passwords such as menuPass, happyyongzi, Thankss, XGstone, and keaidestone. Publi...