TEMPER PANDA
TEMPER PANDA is classified as state-sponsored.
- Suspected state sponsor
- China
- Also known as
- 5
China-based cyber threat group. It has previously used newsworthy events as lures to deliver malware and has primarily targeted organizations involved in financial, economic, and trade policy, typically using publicly available RATs such as PoisonIvy, as well as some non-public backdoors. This threat actor targets prodemocratic activists and organizations in Hong Kong, European and international financial institutions, and a U.S.-based think tank.
The group is suspected of operating with the support of China.
Also known as: Admin338, Team338, MAGNESIUM, admin@338, G0018
Published reports on this actor:
- https://www.fireeye.com/blog/threat-research/2013/10/know-your-enemy-tracking-a-rapidly-evolving-apt-actor.html
- https://www.fireeye.com/blog/threat-research/2015/11/china-based-threat.html
- https://www.cfr.org/interactive/cyber-operations/admin338
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.