LOTUS PANDA
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
Bilbug · DRAGONFISH · Lotus Blossom · RADIUM · Raspberry Typhoon · Spring Dragon · Thrip
MISP
ATK1 · BRONZE ELGIN · Billbug · DRAGONFISH · LOTUS PANDA · Lotus BLossom · Red Salamander · ST Group · Spring Dragon
Lotus Blossom is a threat group that has targeted government and military organizations in Southeast Asia.
02
resolved ATT&CK groups
Threat groups associated with this.
03
related actors
Related entries.
- Raspberry Typhoon· likely
04
techniques used (21)
ATT&CK techniques this enables or maps to.
showing 20 of 21
05
software used (9)
Malware and tools associated with this.
06
references
External citations — patches, advisories, analysis.
- https://securelist.com/blog/research/70726/the-spring-dragon-apt/
- https://securelist.com/spring-dragon-updated-activity/79067/
- https://www.cfr.org/interactive/cyber-operations/lotus-blossom
- https://unit42.paloaltonetworks.com/operation-lotus-blossom/
- https://www.accenture.com/t00010101T000000Z__w__/gb-en/_acnmedia/PDF-46/Accenture-Security-Elise-Threat-Analysis.pdf
- https://unit42.paloaltonetworks.com/attack-on-french-diplomat-linked-to-operation-lotus-blossom/
- https://community.rsa.com/community/products/netwitness/blog/2018/02/13/lotus-blossom-continues-asean-targeting
- https://www.accenture.com/t20180127T003755Z_w_/us-en/_acnmedia/PDF-46/Accenture-Security-Dragonfish-Threat-Analysis.pdf