APT2
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
APT2 · MSUpdater · Putter Panda
MISP
4HCrew · APT2 · MSUpdater · PLA Unit 61486 · PUTTER PANDA · SULPHUR · SearchFire · TG-6952
Putter Panda were the subject of an extensive report by CrowdStrike, which stated: 'The CrowdStrike Intelligence team has been tracking this particular unit since2012, under the codename PUTTER PANDA, and has documented activity dating back to 2007. The report identifies Chen Ping, aka cpyy, and the primary location of Unit 61486.'
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (4)
ATT&CK techniques this enables or maps to.
04
software used (4)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf
- https://www.cfr.org/interactive/cyber-operations/putter-panda
- https://attack.mitre.org/groups/G0024
- https://www.mandiant.com/resources/insights/apt-groups
- https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf