FlagThis
← Threat Actors
/
China
/
Putter Panda
DOSSIER // PUTTER-PANDA
Putter Panda
ACTIVE CAMPAIGN TRACKED
▲ High Threat
China
Primary Aliases:
APT2
G0024
Group 36
MSUpdater
🔍 Adversary Rosetta Stone (4) ▾
📋 Copy All
Sponsor / State Affiliation
People's Liberation Army (PLA)
Primary Motivation
Strategic espionage and theft of defense, aerospace, and maritime intellectual property.
Active Timeline
Unknown – Present
Confidence Rating
85% (Grounded)
Operation Sky-High, Maritime Intel Sweep
📥 Export ATT&CK Layer (.json)
🔔 RSS Feed
🏛️ CISA Advisories ↗
📋 Copy Dossier Briefing
⚔️ Weaponized CVE Matrix
(0)
No specific weaponized CVEs currently mapped in the public baseline.
🎯 Target Sectors & Focus
Aerospace manufacturers
Defense contractors
Maritime engineering firms
Governmental defense agencies
High-tech research institutions
🛡️ MITRE ATT&CK® Attack Lifecycle
(6 TTPs)
📥 Download Navigator JSON
All Stages
6
Initial Access
1
Execution
1
Persistence & Privilege Escalation
2
Command & Control
1
Operational Techniques
1
Initial Access
1
T1566
Spearphishing with malicious attachments
↗
Execution
1
T1059
Living-off-the-Land (LotL) techniques
↗
Persistence & Privilege Escalation
2
T1547
DLL Side-loading
↗
T1547
Credential harvesting via specialized web shells
↗
Command & Control
1
T1071
Custom backdoor deployment
↗
Operational Techniques
1
T1000
Exploitation of edge network devices
↗
📰 Verified Campaigns & Intelligence Archive
🔔 Subscribe to Alerts
[DEEP DIVE]
APT28 and LameHug: AI-Driven Dynamic Command Generation
Attacks and Vulnerabilities
2026-07-03
[DEEP DIVE]
GREYVIBE Leverages ChatGPT and Google Gemini for AI-Augmented Operations against Ukraine
Attacks and Vulnerabilities
2026-07-05
[DEEP DIVE]
APT28 Exploitation of Edge Device Vulnerabilities and EOL Hardware
Attacks and Vulnerabilities
2026-06-19
[DEEP DIVE]
Strategic Pre-positioning: APT29’s Pivot Toward Critical Energy Infrastructure
Strategies and Tactics
2026-05-28
Adversary Rosetta Stone // Putter Panda
×
🔍 Mandiant / Google Threat Intel
APT2
📋
🛡️ Other Industry Tracking Codes
G0024
📋
Group 36
📋
MSUpdater
📋
Copied to clipboard
SHARE INTELLIGENCE WIRE
×
Story Title
X / Twitter
Bluesky
LinkedIn
Copy Link
LINK COPIED TO CLIPBOARD