← All Threat Actors
Threat Actor Profile

Putter Panda

APT2 G0024 MSUpdater
▲ High Threat
Operation Sky-High, Maritime Intel Sweep
Origin China
Sponsor People's Liberation Army (PLA)
Motivation Strategic espionage and theft of defense, aerospace, and maritime intellectual property.

Target Sectors

Aerospace manufacturers Defense contractors Maritime engineering firms Governmental defense agencies High-tech research institutions

Known TTPs

Spearphishing with malicious attachments
DLL Side-loading
Custom backdoor deployment
Living-off-the-Land (LotL) techniques
Exploitation of edge network devices
Credential harvesting via specialized web shells

External Resources

CISA Advisories ↗

Related Intelligence


LINK COPIED TO CLIPBOARD