Threat Actor Profile

Elderwood

Beijing Group Elderwood Gang G0066 Sneaky Panda

▲ High Threat

Ongoing Strategic Targeting of Western Sectors

Origin China

Sponsor Ministry of State Security (MSS) of the People's Republic of China (specifically attributed to the Jinan bureau)

Motivation Strategic espionage and theft of intellectual property

Target Sectors

Government Defense Aerospace Energy Education Financial Media Mining Human Rights NGOs IT Service Providers

Spear-phishing

Watering Hole attacks

Software Packing (T1027.002)

Zero-day exploitation

Custom RAT deployment (e.g., PlugX, Gh0st RAT)

Edge device exploitation

Command and Control (C2) via legitimate web services

CISA Advisories ↗

Hacking the mainframe…