BlackTech

ACTIVE CAMPAIGN TRACKED ▲ High Threat China

Primary Aliases: Canary Typhoon CIRCUIT PANDA Radio Panda Earth Hundun

Sponsor / State Affiliation People's Republic of China (PRC)

Primary Motivation Strategic cyber espionage and intelligence gathering

Active Timeline Unknown – Present

Confidence Rating 85% (Grounded)

APAC Telecommunications Intrusion, Edge Infrastructure Exploitation Wave

⚔️ Weaponized CVE Matrix (0)

No specific weaponized CVEs currently mapped in the public baseline.

🎯 Target Sectors & Focus

Telecommunications Government Defense Technology Aviation Maritime Energy

🛡️ MITRE ATT&CK® Attack Lifecycle (7 TTPs)

📥 Download Navigator JSON

Initial Access 2

T1190 Exploit Public-Facing Application

Credential Access & Discovery 1

T1003 Credential Access via Memory Dumping

Command & Control 1

T1071 Custom Malware Deployment

Operational Techniques 3

T1574.002 DLL Side-Loading (T1574.002)

T1000 Living off the Land (LotL)

T1000 Remote Services Exploitation

📰 Verified Campaigns & Intelligence Archive

🔔 Subscribe to Alerts

[DEEP DIVE] BlackTech APT Deploys BlueShell Linux Backdoor

Attacks and Vulnerabilities 2026-08-05

Copied to clipboard

LINK COPIED TO CLIPBOARD