TEMPER PANDA
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
admin@338
MISP
Admin338 · MAGNESIUM · TEMPER PANDA · Team338
China-based cyber threat group. It has previously used newsworthy events as lures to deliver malware and has primarily targeted organizations involved in financial, economic, and trade policy, typically using publicly available RATs such as PoisonIvy, as well as some non-public backdoors. This threat actor targets prodemocratic activists and organizations in Hong Kong, European and international financial institutions, and a U.S.-based think tank.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (12)
ATT&CK techniques this enables or maps to.
04
software used (7)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.