What other aliases and vendor names is Aquatic Panda known by?

Aquatic Panda is tracked across the cybersecurity industry by multiple aliases, including: BountyGlad, BRONZE UNIVERSITY, Charcoal Typhoon, CHROMIUM, ControlX, Earth Krahang, Earth Lusca, FISHMONGER.

What vulnerabilities and CVEs does Aquatic Panda actively exploit?

Aquatic Panda has been observed weaponizing vulnerabilities including CVE-2021-38003.

Aquatic Panda

Q: What are the primary motivations and sponsors of Aquatic Panda?

Aquatic Panda operates from China with primary motivation categorized as Strategic espionage and intelligence collection targeting geopolitical interests and critical infrastructure., sponsored or affiliated with China (PRC).